News for hackers. Stuff that matters.
Re:Ask HN: Why are we still using passwords? by zeemonkee on Tuesday December 14, 2010 @02:45PM (#2005458)
One way would be the same thing you do with "forgot my password" links. You enter your email address, a link with a random activation key gets mailed to you, click on the link in your email client and get logged back in. The activation key would have a limited valid span, say 30 mins, so even if anyone got hold of it it would be useless.

The disadvantages are a) your email can be hacked and b) it's a bit inconvenient for the user. Also you'd need SSL to protect the key, which would be in the URL.

Re:Ask HN: Why are we still using passwords? by arohner on Tuesday December 14, 2010 @02:53PM (#2005490)
This is my de-facto password management scheme right now. I call it "log in via email" (as opposed to log in via facebook or google).