Earlier quoted context omitted.
its my default browser now. It still great!
Well, I used to love Opera as well, it was my first "serious" browser as I became a netizen. But now I wouldn't even dare to try it as it's owned by a consortium of Chinese investors, rather than a Norwegian company.
Tell HN: Somebody implemented something I wrote a blog about
81–90 of 253 posts
Re: Tell HN: Somebody implemented something I wrote a blog about
#82We implemented something that avoids the original articles, 2FA notification. After your password is approved before 2FA you get an email. So even if someone is somehow using the right 2FA you are aware. Our thinking was the mosly likely outcome was someone would hit 2FA, not have the code and so close the request without even entering a bad code. Apart from that though, it is always nice to get recognition for the s…
But email can be delayed for hours or days.
Re: Tell HN: Somebody implemented something I wrote a blog about
#83Earlier quoted context omitted.
tl;dr: The code should verify the user's second factor before the user's password. Consider this, scenario A: 1. When attacker enters a username and bad password. then they receive a bad password error. 2. When attacker enters a username and good password, then they receive a 2FA prompt. And then scenario B: 1. When attacker enters a username and bad password, then they receive a 2FA prompt. 2. When attacker enters a…
But which 2FA prompt should they receive? If MFA can be configured using myriad choices, should a user be prompted to "Insert security key" or "Input security code" or "Send code to your email/SMS" or "Tap YES on your mobile device"? Since you can't know a priori what the second factor will look like, I'd say it's troublesome to try and present a challenge to every user regardless of their MFA configuration.
If your 2FA options all require the user to enter a code, you can simply display a "Please enter your 2FA code" dialog without divulging what kind of 2FA the user has.
Re: Tell HN: Somebody implemented something I wrote a blog about
#84Re: Tell HN: Somebody implemented something I wrote a blog about
#85Earlier quoted context omitted.
> leak whether or not a password is correct Errm, could you elaborate what is the issue here?
tl;dr: The code should verify the user's second factor before the user's password. Consider this, scenario A: 1. When attacker enters a username and bad password. then they receive a bad password error. 2. When attacker enters a username and good password, then they receive a 2FA prompt. And then scenario B: 1. When attacker enters a username and bad password, then they receive a 2FA prompt. 2. When attacker enters a…
Re: Tell HN: Somebody implemented something I wrote a blog about
#86Re: Tell HN: Somebody implemented something I wrote a blog about
#87Earlier quoted context omitted.
Opera was the most innovative web browser ever. They brought so many new things to the world of web browsing. Tabbed-browsing, mouse gestures, colored tabs, browser themes, in-built security integration with anti-virus software, an extensible browser - so many wonderful innovative features. It was a paid software initially, but then they made it free for everyone. I used to use it as my default browser, maybe 13-15 y…
Are you sure tabbed browsing was Opera? I mean, Mozilla browser (predating Firefox) had it in 1998.
Re: Tell HN: Somebody implemented something I wrote a blog about
#88I havnt done this in many years but for a while I was making creative content that was published online. Once in a while someone would contact me saying they liked what I did. I started doing the same. If I read an article I liked a lot I would contact the person and tell them I liked it and why. About half the time they responded with Thanks. I didnt do this with NYT writers or anything. Just people who clearly dont…
This was a good comment. Keep it up!
Re: Tell HN: Somebody implemented something I wrote a blog about
#89I often just want to follow up later by “adding to my library,” and it feels weird to “LOVE” it before ever hearing it. I really feel pain when I hear something terrible that I’ve already “liked” and consider the impacts to my algorithm.
Please distinguish between “like” and “save.”
A simple “plus sign” or really any other symbol that signifies “adding to a collection” without “liking” connotations (stars are out too).
Re: Tell HN: Somebody implemented something I wrote a blog about
#90Earlier quoted context omitted.
Opera was the most innovative web browser ever. They brought so many new things to the world of web browsing. Tabbed-browsing, mouse gestures, colored tabs, browser themes, in-built security integration with anti-virus software, an extensible browser - so many wonderful innovative features. It was a paid software initially, but then they made it free for everyone. I used to use it as my default browser, maybe 13-15 y…
Are you sure tabbed browsing was Opera? I mean, Mozilla browser (predating Firefox) had it in 1998.
Then Netscape and IE got into a war for mindshare, and part of that was to ignore MDI and splash their browser windows all over the taskbar instead, to be more visible and grab more user attention.
Tabbed browsing was never a new invention, it was just a re-implementation of what we already had by way of MDI.