News for hackers. Stuff that matters.

A comment on Safari tries to fill username. Parent comment

Re:Safari tries to fill username by fuzzer37 on Friday May 28, 2021 @02:17PM (#27318721)
I think the difference is that taking a drivers education class, and (in my experience, at least) is that there is actual hands on driving experience. I think an IT certificate or security audit is a lot more abstract.

The only way to check the "Has taken a driving class and has at least 20 hours behind the wheel" is to do just that. How many different ways could you check the "Secure password requirements are enforced by users" box? How many ways could you check the "physical security to encrypted systems" box?

[ Parent | on HN ]
Re:Safari tries to fill username by Wowfunhappy on Friday May 28, 2021 @09:41PM (#27322431)
Totally—but I think that's actually what leads to the dumbest requirements people are complaining about. "Don't allow autofill." "Don't allow pasting passwords." "All passwords must contain at least five special characters and your first born son." Those are boxes that can only be checked one way.

I'm not quite sure where I'm going with this. Something about, maybe things are broken because they don't fit in the insurance company model, and someone needs to solve for that before anything gets better.

[ Parent | on HN ]