Why even let users set their own passwords?

Re:Why even let users set their own passwords? by waynesonfire on Saturday July 22, 2023 @02:08PM (#36828351)

I dont agree with you that it's the user's fault. The issue isn't understanding of remember this device feature. The issue is it's a fundamentally broken design. One, because users have multiple devices and second, the feature is crippled when employing privacy preserving behavior.

I should be able to authenticate by proving access to a device such as a yubikey, as an example. Now, the site can properly remember the user. This missing feature is the fault of crummy UX, not the user.

[ Parent | on HN ]

Re:Why even let users set their own passwords? by hinkley on Saturday July 22, 2023 @04:58PM (#36829858)

When I think 'multiple devices' I think 'multiple devices'. Yubikey is a solution for multiple computers but I don't see how something 'such as a yubikey' solves this problem for devices.

[ Parent | on HN ]

Re:Why even let users set their own passwords? by hn_throwaway_99 on Saturday July 22, 2023 @07:11PM (#36830856)

I see nothing about the design that is broken. Most websites have implemented "remember this device" functionality in a way that 99% of users understand fine how to use. Some people have specifically implemented an option that says "Completely erase any potential for sites to remember this device", and then start bitching about poor design??

Queen, please. I have no objection for people choosing the "forget my device" option, but the nonsensical whining about explicitly choosing this option and then bemoaning that a website doesn't remember you is absurd.

[ Parent | on HN ]