Live data from Hacker News

“I Emailed 97,931 Users Their Passwords”

71–72 of 72 posts

Re: “I Emailed 97,931 Users Their Passwords”

#71

Post by tripzilch » Thu, Jun 25, 2015, 8:31 AM UTC

julianj wrote: post #61

ocdtrekkie wrote: post #59

Earlier quoted context omitted.

Password is already compromised, so this is a worthless step. And only seeing part of the password may cause them to think it's largely still secure or something. (Some people don't understand wildcards.)

Good point

Nonono really bad idea, because of shoulder-surfing!

Re: “I Emailed 97,931 Users Their Passwords”

#72

Post by ocdtrekkie » Fri, Jun 26, 2015, 2:24 PM UTC

tripzilch wrote: post #71

julianj wrote: post #61

Earlier quoted context omitted.

Good point

Nonono really bad idea, because of shoulder-surfing!

Since their password is already compromised publicly on the Internet, it's silly to worry about shoulder-surfing. In fact, if someone shoulder-surfs, and sees the password, the user is even more encouraged to CHANGE it.

Post reply on HN