You don’t need a password. Posterous fail.

Re:You don’t need a password. Posterous fail. by loewenskind on Friday June 18, 2010 @08:57AM (#1442033)

99% of the time? So if someone decides to trash my reputation they can just post a bunch of stupid blog entries as me and it is on me to (a) detect that this even happened by checking my mail, (b) go do whatever work needed to remove the post and (c) try to explain to everyone what happened (likely causing even more people to do it when they realize how ridiculous the system I'm using is) and salvage my reputation?

That doesn't sound like "works 99% of the time" to me, that sounds like an epic fail.

EDIT: It appears that this was more of a configuration issue, so the above only applies if you set up your account this way.

[ Parent | on HN ]

Re:You don’t need a password. Posterous fail. by isleyaardvark on Friday June 18, 2010 @09:23AM (#1442108)

You can already post a bunch of stupid blog comments as someone else, as long as people realize Posterous has a similar problem, it's not going to ruin your life. (Plus, (a) doesn't seem to be that big of a problem for a service you're using your email to access.)

[ Parent | on HN ]

Re:You don’t need a password. Posterous fail. by macrael on Friday June 18, 2010 @12:47PM (#1442812)

Commenting on someone's site using a different name is pretty different from being able to fake a post. I have no expectation that comments are written by who they say they are, but I do expect all the posts to be written by the same person.

[ Parent | on HN ]

Re:You don’t need a password. Posterous fail. by edanm on Friday June 18, 2010 @04:49PM (#1443519)

Clarification: by 99%, I meant it works for 99% of users, whom no one will ever try and attack. Obviously it's just my opinion.

[ Parent | on HN ]