Tell HN: Somebody implemented something I wrote a blog about

Post by _HMCB_ » Sun, Sep 25, 2022, 12:30 AM UTC

pasc1878 wrote: post #249

_HMCB_ wrote: post #248

Earlier quoted context omitted.

What do you mean by vertical tabs?

The tabs are to the side rather than along the top. This allows you to see the text in the tab when you have several tabs open. Ideally tabs should be indented so you can see which tab you linked the page from. The best implementation is the Firefox extension Tree Style tab https://addons.mozilla.org/en-GB/firefox/addon/tree-style-ta... But simpler vertical tabs are on Vivaldi, OmniWeb which had them since the mid 19…

Post by idkyall » Tue, Sep 27, 2022, 8:02 PM UTC

thewebcount wrote: post #142

idkyall wrote: post #36

Earlier quoted context omitted.

If you input a username and wrong password, in some cases, the service won't prompt you for your 2FA code. If you input the right username and password, it will then go forward in the flow and prompt you for the 2FA. I believe parent comment is suggesting the system should prompt for 2FA even if the password was incorrect, so that you can't infer whether you guessed the correct password without also compromising the…

Well, doesn't it also matter if the 2FA method sucks? For example, maybe you can use a SIM swap to get the one-time code, but if you don't have the password, too, then that doesn't help you. In the above scenario, they can figure out whether they have the password or not, and once they do, then use a SIM swap to get the second factor (or whatever), and then they're in. If the login never tells them which factor is ba…