News for hackers. Stuff that matters.
Re:Why we went passwordless on our new product by kyriakos on Sunday March 07, 2021 @01:10PM (#26378117)
Email links mean I can't login from someone else's pc because I don't have my email setup on it. I find that very bad UX
Re:Why we went passwordless on our new product by spuz on Sunday March 07, 2021 @01:21PM (#26378209)
You don't need your email set up on someone else's PC in order to log into a service which uses passwordless login. You only need access to your email from some device - not necessarily the device which you want to log in with.
Re:Why we went passwordless on our new product by xg15 on Sunday March 07, 2021 @01:21PM (#26378221)
As I understood the service, it does not require that you click the link on the same machine that you login from. In fact, the screen shots sort of assume that you open the mail on your phone even if you login from your desktop.
Re:Why we went passwordless on our new product by stickfigure on Sunday March 07, 2021 @01:12PM (#26378126)
In this day and age, you should not login to anything from someone else's PC.
Re:Why we went passwordless on our new product by reaperducer on Sunday March 07, 2021 @01:26PM (#26378266)
In this day and age, you should not login to anything from someone else's PC.

There are a lot of occupations where you don't have your own computer, and share one with many other people.

For many jobs, the value is not in the person, but in the position, so the position has a single computer for a function that multiple people fill. Especially if you work for a company that operates 24/7.

For example, each person person operating a control computer at a recycling station does not have his own computer. There is a computer for each position, and who mans that position will change from day to day.

Freight dispatchers, retail sales, customer service, airline operations, and many broadcast positions are in the same boat.

Imagine how big an airline ticketing counter would have to be if "In this day and age, you should not login to anything from someone else's PC" was reality.

Re:Why we went passwordless on our new product by stickfigure on Sunday March 07, 2021 @08:57PM (#26381623)
That's a silly interpretation of my point. Sure, log into work resources - including your work email - with your work computer. Email token auth works fine for your work context.

If you're mixing work resources and personal email (or vice-versa), you have a problem. You should never hand off control of your intimate personal life to the security (or lack thereof) of your employer. And vice versa; your employer should not trust putting their intellectual property on questionably secured personal computing devices.

Re:Why we went passwordless on our new product by Tagbert on Sunday March 07, 2021 @01:38PM (#26378384)
In that scenario, do you have individual accounts on the computer or are you all using a single login and sharing it? The first scenario is fairly secure, the latter is a nightmare.
Re:Why we went passwordless on our new product by reaperducer on Sunday March 07, 2021 @01:43PM (#26378448)
In that scenario, do you have individual accounts on the computer or are you all using a single login and sharing it?

I've never worked for an airline, so I can't say what happens in that specific scenario.

However, when I worked for a chemical company, printing out the hazardous materials labels for sample drums that were shipped all over the country, the computer had a single common login for all users.

I don't see how that is a nightmare.

Re:Why we went passwordless on our new product by moron4hire on Sunday March 07, 2021 @01:40PM (#26378407)
I feel pretty safe logging into stuff from my wife's computer.
Re:Why we went passwordless on our new product by stickfigure on Sunday March 07, 2021 @08:48PM (#26381582)
Then you should feel pretty safe logging into your email from your wife's computer.
Re:Why we went passwordless on our new product by postalrat on Sunday March 07, 2021 @01:38PM (#26378383)
Then forward the magic link email to your friends email address.