Re:Bethesda removing mandatory login from Doom re-releases a...
by peteretep on Monday July 29, 2019 @01:09PM
(#20556847)
We really need to get to a point where companies see holding identifiable data as a big risk that they only want to undertake if absolutely needed
[ Parent
| on HN ]
Re:Bethesda removing mandatory login from Doom re-releases a...
by tictoc on Monday July 29, 2019 @01:12PM
(#20556884)
I agree. I recall Reddit would just require a user id and a password to use their site. I liked that model. I guess they eventually goaded you into giving their email, but there are alternatives to password recovery than a forget my email link.
Re:Bethesda removing mandatory login from Doom re-releases a...
by Deimorz on Monday July 29, 2019 @01:37PM
(#20557160)
Giving an email on reddit is still technically optional, but they try to make that unclear.
During registration you can just leave the email field blank and click "Next" to skip giving one, even though there's no indication at all that it's optional.
The site also annoys you constantly now to add an email address, but you can ignore or adblock that.
Re:Bethesda removing mandatory login from Doom re-releases a...
by lunias on Monday July 29, 2019 @02:22PM
(#20557657)
"New Reddit" is basically a primer on UX dark patterns. Its collapse cannot come soon enough.
Re:Bethesda removing mandatory login from Doom re-releases a...
by s09dfhks on Monday July 29, 2019 @08:12PM
(#20560871)
Old.reddit.com still works until they decide to remove it
Re:Bethesda removing mandatory login from Doom re-releases a...
by BRAlNlAC on Tuesday July 30, 2019 @11:34AM
(#20565845)
Try i.reddit.com for an even more barebones experience
Re:Bethesda removing mandatory login from Doom re-releases a...
by m-p-3 on Wednesday July 31, 2019 @10:49AM
(#20574820)
As far as I know, you cannot access quarantined subreddits without an account with a verified email address.
Re:Bethesda removing mandatory login from Doom re-releases a...
by JeremyBanks on Monday July 29, 2019 @01:16PM
(#20556936)
Such as?
Re:Bethesda removing mandatory login from Doom re-releases a...
by jethro_tell on Monday July 29, 2019 @01:18PM
(#20556957)
storing the password in plain text so you can just find it in a data breach when you loose your password.
Re:Bethesda removing mandatory login from Doom re-releases a...
by Deimorz on Monday July 29, 2019 @01:46PM
(#20557253)
On Tildes, I let people add a recovery email address for their account, but I hash it (with Argon2), and if anyone needs to do an account recovery they have to send an email requesting it from that address, including their username. Then I hash the sending email address and only send reset info back if it matches the stored hash for the account.
There are still some minor issues with doing it that way, but it's much, much better than storing plaintext email addresses. I don't know of any other sites doing it this way, but I wouldn't be surprised if others have thought of the same method.