News for hackers. Stuff that matters.

A comment on “Invalid username or password” is a useless security measure.

Re:“Invalid username or password” is a useless security measure by matthijs_ on Monday December 01, 2014 @02:27PM (#8683091)
Excellent point. However, I think username / password will be (at least partially) replaced by this:

https://passwordless.net/ - Token based authentication

[ Parent | on HN ]
Re:“Invalid username or password” is a useless security measure by Benferhat on Monday December 01, 2014 @02:38PM (#8683175)
If I'm not logged into a site a that I regularly use, I'm probably not logged into my email, either. In order to log into my favorite site with Passwordless, I have to log into my email as well. With my password. One login for the price of two, and I'm still using a password.
[ Parent | on HN ]