Re:Let’s talk about usernames
by fbdjskajxb on Monday February 12, 2018 @02:01PM
(#16360998)
The part I don’t get is how not knowing your password makes the situation worse. The password recovery mechanism exists whether or not you use it every time you log in.
The way I see it, not knowing your password removes some potential threats around managing that password incorrectly, at the cost of increasing the risk of losing access to your account if the recovery mechanism doesn’t work.
It doesn't make the situation worse, you're the only person suggesting that.
It offers some extra security, but very little. It's the digital equivalent of locking your back door but not bothering with the front door.
Re:Let’s talk about usernames
by fbdjskajxb on Monday February 12, 2018 @11:00PM
(#16364637)
>It doesn't make the situation worse, you're the only person suggesting that.
The comment I originally responded to seemed to think so.
Your login information can be gained via keyloggers, network sniffing, phishing scams, malware, malicious employees, and all sorts of other methods..
This is why two-factor authentication is so important, to help prevent your account from being compromised in the event that your username and password is.