News for hackers. Stuff that matters.

A comment on Steam hit by major security breach. Parent comment

Re:Steam hit by major security breach by NeutronBoy on Monday July 27, 2015 @07:15AM (#9954486)
Both of these things can be true with temporary plaintext passwords.
[ Parent | on HN ]
Re:Steam hit by major security breach by tripzilch on Monday July 27, 2015 @06:39PM (#9958469)
> Both of these things can be true with temporary plaintext passwords.

In that sense, a password reset link is equivalent to a temporary plaintext password.

Except it's got better usability, being a link that you can click on.

[ Parent | on HN ]
Re:Steam hit by major security breach by ajanuary on Monday July 27, 2015 @07:37AM (#9954546)
Temporary plaintext passwords are rare; I don't think I've ever seen one. If you've got as far as temporary plaintext passwords, I'd argue it's a better UX to provide a simple link instead of forcing them to copy and paste something.
[ Parent | on HN ]