Timeline for If you mistakenly try to access a website with an unrelated username/password, do they record your logon data?
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 3, 2020 at 16:29 | comment | added | Harper - Reinstate Monica | Let us continue this discussion in chat. | |
| Mar 2, 2020 at 20:14 | comment | added | schroeder♦ | @Harper-ReinstateMonica taking on that liability is not "arm-wavy". I think there is a compromise that will not cause problems for all parties involved | |
| Mar 2, 2020 at 20:13 | comment | added | Harper - Reinstate Monica | @schroeder depending on the site and its demographic, sometimes, it's right. Mind you I didn't say safer. | |
| Mar 2, 2020 at 20:11 | comment | added | schroeder♦ | @Harper-ReinstateMonica and you're saying that the safer options for password management when users forget their password are not as usable? | |
| Mar 2, 2020 at 18:34 | comment | added | Harper - Reinstate Monica | You need to store passwords in the clear so you can send them to dumb users who forget them. While that's bad for some sites, I won't armwave that it's bad for all sites. Not every site needs Fort Knox security. Security at the expense of usability comes at the expense of security. | |
| Mar 2, 2020 at 12:16 | comment | added | Giacomo Alzetta |
To be noted that if you incorrectly enter the password in the username field, then that will be logged. So I'd say "contents of password fields" instead of "passwords", since the application cannot know that xunh'%3nbs is your password instead of your username.
|
|
| Mar 2, 2020 at 8:05 | history | answered | schroeder♦ | CC BY-SA 4.0 |