Asklemmy

43945 readers

639 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

Open-ended question
Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
Not ad nauseam inducing: please make sure it is a question that would be new to most members
An actual topic of discussion

Looking for support?

Looking for a community?

Lemmyverse: community search
sub.rehab: maps old subreddits to fediverse options, marks official as such
!lemmy411@lemmy.ca: a community for finding communities

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 5 years ago

MODERATORS

159

People have been cleaning their ears with cotton swabs for years. What other tools are being inadvertently used wrong? (feddit.nl)

submitted 1 year ago by ediculous@feddit.nl to c/asklemmy@lemmy.ml

221 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] vzq@lemmy.blahaj.zone 13 points 1 year ago (1 children)

Passwords, as in user chosen secrets used to prove identity, are a really bad idea in general. Turns out, people are crappy at coming up with stuff that is hard to guess. They are also crappy at remembering things that are hard to guess. That’s why every website these days wants to SMS you a code or makes you use an Authenticator.

Thankfully people are catching on, and secure passwordless sign in is gaining ground rapidly.

[–] shinigamiookamiryuu@lemm.ee -2 points 1 year ago (3 children)

I'm surprised no place uses IP addresses anymore to authenticate (I was around when Postopia did or whatever that candy themed game place was). Many IP-ban when it comes to identifying rulebreakers, you'd think they'd IP-authenticate too.

[–] ahal@lemmy.ca 8 points 1 year ago (1 children)

Imagine if your roommate could just get into all your accounts?

[–] shinigamiookamiryuu@lemm.ee 1 points 1 year ago

I know that's untactical, but I mean as long as IP bans are already a thing...

[–] mackwinston@feddit.uk 4 points 1 year ago

Carrier grade NAT. For instance, on our local mobile phone network, thousands of handsets will have the same public IP address.

[–] vzq@lemmy.blahaj.zone 4 points 1 year ago

All major services do risk based authentication these days. I’m fairly certain network address factors into the risk calculations.