“Magic links” can end up in Bing search results, rendering them useless

Re:“Magic links” can end up in Bing search results, renderin... by dmw_ng on Monday June 27, 2022 @09:38AM (#31894435)

Links like this are stupid regardless of Outlook's behaviour because they require a perfectly reliable client and network and user in a perfectly undisturbed flow. If I can't F5, if I double-click, if my mouse is wonky, my wifi is bad, my power goes out, my computer hangs, my DSL dies just after a click, if I accidentally close the tab.. there are any of a thousand reasons why abusing GET for a one-time-use page or redirect is horribly wrong.

It takes incredible arrogance to continue using them in order to "improve usability" given all the obvious and common cases where they completely destroy usability. The difficulty for a provider to verify they aren't sending you to a phishing or browser 0day page barely scratches the surface.

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by rsbadger on Monday June 27, 2022 @09:45AM (#31894531)

The only purpose of this link was to verify that the email address is valid. Once it’s verified, you can login.

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by TremendousJudge on Monday June 27, 2022 @09:48AM (#31894559)

I have seen services where you have to click a link every time you want to log in

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by roci89 on Monday June 27, 2022 @10:12AM (#31894850)

They are called magic links... only thing magic about them is their ability to annoy me

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by stetrain on Monday June 27, 2022 @11:24AM (#31895869)

I think they exist to simplify the flow for the subset of users who end up using the Reset Password link each time their session expires.

And I think that subset is much larger than some would expect.

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by asdfqwertzxcv on Monday June 27, 2022 @11:15PM (#31903693)

This. You'd be amazed how many users just do a password reset each time to login instead of remembering their login info.

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by chalupa-man on Tuesday June 28, 2022 @08:13AM (#31906682)

My father has insisted on doing this for over 20 years, but he doesn't know how to do it himself. I expect a password-reset phone call from him every 2 or 3 days and have done since 1998. Just recently he had someone from his bank's IT department call him directly about resetting his password over 500 times.

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by exikyut on Tuesday June 28, 2022 @03:51PM (#31912194)

I'm not sure if he's still doing it but someone put together https://theuserisdrunk.com/ and https://theuserismymom.com/ a few years back... I wonder if you could do something similar here, given the level of absolute predictability that seems to be involved.

I sadly can't put my finger on what's so compelling about this, just that my "oh that person should talk to a UX team lead!" meter just went plink

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by rapind on Monday June 27, 2022 @01:41PM (#31897983)

Or "passwordless" login, and I love it. Not many people use password managers and will reuse passwords between websites (I.e. their bank and some random unsecured SaaS product). One-time emailed passwords are an easy way to avoid this problem and have a fairly secure site (mind you, it's only as secure as their email). You can layer 2FA on top of this too.

It's only annoying if the site is constantly timing you out so that every single visit you need to resend. Why not just use secure cookies to remember the user for say a week?

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by shantnutiwari on Monday June 27, 2022 @12:09PM (#31896596)

>They are called magic links... only thing magic about them is their ability to annoy me

I love them and prefer them to creating yet another account with a password.

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by asdfqwertzxcv on Monday June 27, 2022 @11:15PM (#31903695)

Me too!

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by brundolf on Monday June 27, 2022 @07:19PM (#31902198)

I had a similar case recently where I was getting the magic link in an email on my phone, and needed to copy it into Slack so I could click it on the laptop I wanted to actually log in on

This... was impossible to do, because by long-pressing on iOS to get the Copy prompt, iOS also goes ahead and opens a preview of the link next to it

[ Parent | on HN ]

Re:“Magic links” can end up in Bing search results, renderin... by withinboredom on Wednesday June 29, 2022 @10:00AM (#31920199)

Haha, I was in a restaurant and you paid through your phone. My browser updated so it closed between the thank you page and the payment click. State was lost so the thank you page was broken. The restaurant didn’t think I paid but my bank account said otherwise (this was a bank transfer via ideal, not credit card). Getting out of there without paying twice was entertaining.

[ Parent | on HN ]