91–100 of 134 posts
Earlier quoted context omitted.
Think of it more like ignoring job requirements when submitting your resume. Once you get an interview, that's all that matters.
Or rather, lying on your CV, claiming you meet the requirements; having someone who knows all the tips tricks and buzzwords edit it for you? But hey, once you get an interview!
Earlier quoted context omitted.
This sounds like it would break a bunch of email address verification systems, password recovery links and the like. I wonder if indeed it does break them, but since it only affects smaller websites nobody seems to care.
> "This sounds like it would break a bunch of email address verification systems, password recovery links and the like." This is exactly the pain I've experienced with my own site, https://alchemist.camp I've manually tested it and seen the token consumed when clicking the link via gmail but had no issues when copying the link from the password reset email to a gmail account. A second manual tester confirmed the same…
Not quite as secure, but way better than never expires?
Earlier quoted context omitted.
I find that passwordless links usually expire after 1 use or some amount of time; generating eternal alt-passwords for an OkCupid account in every message notification email seems pretty heinous.
Gmail now pretty much breaks single-use tokens in links because it consumes them itself after a user clicks on them, but before redirecting the user to the site. It's an unfortunate change that has made single-use links a worse UX and less popular in the last couple of years.
Earlier quoted context omitted.
Wasn't lax just for static assets like images that are linked in external HTML?
Yes it was - "... are sent when a user is navigating to the origin site" https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Se...
I have no idea if OkCupid still does this, but they used to segment their users based on attractiveness ratings. At first, I think it was solely just literally your attractiveness rating. They had a feature where you could rate people 1-5 stars and if you were in the top 50% of all rated users, you'd only see other people in the top 50% in your search results. If you were lower 50%, you'd only see people in the lower…
Maybe not! Perhaps users would have more positive experiences if they "swam in their lanes."
I have no idea if OkCupid still does this, but they used to segment their users based on attractiveness ratings. At first, I think it was solely just literally your attractiveness rating. They had a feature where you could rate people 1-5 stars and if you were in the top 50% of all rated users, you'd only see other people in the top 50% in your search results. If you were lower 50%, you'd only see people in the lower…
OKCupid used to be substantially weirder than it was before it was swallowed up by IAC. I mean really fucking weird. One of many examples: the signout page had a clipart photo of an airport firefighter (ie silver suit head to toe) in a veeeeery suggestive pose with a firehose.
However, dating sites absolutely engage in the same techniques to hook users and reduce "churn" that free-to-play / cosmetic-sale-funded games do. Tinder is basically ELO applied to matchmaking coupled with the same psychological tricks (like initially showing your profile to much more attractive people / showing you much more attractive people, before dropping the liklihood of your profile appearing in anyone's stacks, and periodically re-boosting your profile just a tad to keep you from deleting your account.)
Edit just to say I forgot: why on earth is okcupid allowing links at all? Seems ripe for abuse. I guess it would encourage people to switch to off-site messaging quicker...
Earlier quoted context omitted.
I learned recently that if someone forwards you the email that OKC sends them alerting them to a new message and you click on it you gain passwordless access to their account. I contacted OKC about this but they said that it was not an issue.
That's shocking! Really surprised that they don't see this as an issue, I would expect that it's trivial to social engineer someone into forwarding you one of those emails.
Haven't been single for a while - is OK cupid still a thing? I thought everyone used Tinder now.
Bumble and Coffee Meets Bagel are two examples of major non-Match-Group companies.
They might be security wise rather weak, but their statistics blog is a brutal-beautiful view into what humans search for dating. https://theblog.okcupid.com/tagged/data
The official blog is the cleaned-up version, they removed the most interesting articles when they sold out to match.com Famously, the article "Why You Should Never Pay For Online Dating" got deleted during the acquisition. [1] Mirror: https://www.gwern.net/docs/psychology/okcupid/whyyoushouldne...
This is off memory but I believe their stats showed that men rated women's photos on what resembled a classic bell curve, shifted to the right slightly. Ie, dudes were generally reasonable if not a wee bit overly kind.
Women were exceptionally brutal in ranking men's looks. Women's ranking of men was a triple-diamond ski hill with damn near most of the userbase falling in (I believe, again, this is from memory) the bottom third. "Women are held to unrealistic beauty standards" seems to be more than a bit of projection.
Funny story: I got banned from OKCupid once for calling out other volunteer flagmods (people suckered into wasting their time policing OKCupid user photos for free) for body shaming and transphobia (the latter almost exclusively toward transfemmes, but both coming almost exclusively from white, straight women.) Hilarious.