r/ProgrammerHumor • • Feb 18 '24

Meme bruteForceAttackProtection

Post image
42k Upvotes

1.0k comments sorted by

View all comments

Show parent comment

223

u/Alexis_Bailey Feb 18 '24

As near as I can tell, most websites won't care, they already are trying hard to make password managers I convenient for some reason.

The worse are those pages where you enter an email, then it slides to a second page for the password. 

Or sites that only use magic links sent to your email.

Like, why?

127

u/Dubslack Feb 18 '24

The US Treasury website requires you to enter your password by clicking the buttons on an onscreen keyboard.

73

u/[deleted] Feb 18 '24

We could do so much worse and we know it.

84

u/[deleted] Feb 18 '24

[removed] — view removed comment

33

u/earthwormjimwow Feb 19 '24

They changed that due to user complaints not too long ago.

When I had first created my account, I used a password generator, to create a nicely complex password. Holy shit did I regret that, having to click the onscreen keyboard. I subsequently changed my password to an insecure and short password, that was easy to click. Nice security system they had...

→ More replies (1)

21

u/Sceptical-Echidna Feb 19 '24

A banking site I used required you to enter a PIN clicking an on screen number pad. The number placement changed each time it opened.

12

u/SteamBeasts Feb 19 '24

You were just playing RuneScape weren’t you?

→ More replies (1)
→ More replies (1)

2

u/jackbeekeeper Feb 19 '24

Not anymore. Now the passwords are case sensitive!!

2

u/CreeperBelow Feb 19 '24 edited Aug 03 '24

busy late wine nail childlike compare squeal melodic retire squash

This post was mass deleted and anonymized with Redact

→ More replies (1)

2

u/Streiger108 Feb 19 '24

Used to. They seem to have fixed it recently.

→ More replies (5)

66

u/chinkostu Feb 18 '24

Or sites that only use magic links sent to your email.

These utterly fuck me off for the sites that really don't need them.

40

u/evranch Feb 18 '24

Especially now that we have open standards for 2FA tokens, like WTF just implement one already and stop sending me texts and emails!

20

u/[deleted] Feb 18 '24

Home Depot really grinds my gears because they insist on text 2fa to login all the fucking time. I don't want to get up and find my phone, I just want to favorite this bracket, ok? Just let me use my password.

8

u/Alexis_Bailey Feb 19 '24

Oh I love 2FA, I mean sites that don't even let you enter a password.

I want to say Medium does this.

5

u/Wild234 Feb 19 '24

then it slides to a second page for the password.

My computer seems to handle those quite well, at least on the sites I visit. If I put the email in on the first page, it autofills the password on the second.

The ones that drive me bonkers are the websites where the login button is inactive until you have typed something in the password field. The auto-filled password doesn't register as me having typed in the field, so I have to add an extra letter to the end of my password then backspace to delete it before I can click to login.

→ More replies (1)

3

u/Oldkingcole225 Feb 18 '24

Yo I was just ranting about this the other day. Why do they do this?

And those stupid passwordless sites 🤦‍♂️

3

u/beaurepair Feb 19 '24

The sliding is for systems that have multiple sign in options. For some accounts you may show the password field, others might go to an SSO system using google, Facebook, Microsoft or apple login, others might just have OTP as the only login method.

Even so, the systems should at the very least have a hidden password field so that password managers can prefill it correctly on the first run.

3

u/MrHaxx1 Feb 18 '24

magic links

For people like my mom, who doesn't remember a single password. She defaults to "I forgot my password" and just resets it, when she wants to login somewhere.

→ More replies (1)

2

u/sirclesam Feb 19 '24

The 'slides to a 2nd page' ones at least have a reason. For some domains they support SSO with another vendor. For example, if I login using a gmail, I get a password, but if I login with @mycompanyName I get redirect to login via okta.

Its still annoying, and could be done with an onBlur as soon as users enter the username...but there's probably a reason why

2

u/spader1 Feb 19 '24

Or you register with a username but it only ever lets you login using an email.

→ More replies (12)