Recent activity
Subscribe to this feed
adactio replied on October 20, 2008 17:31 to the question "have you considered asking for password confirmation on signup?" in Huffduffer:
I thought about it but I rejected the idea. Firstly because I want to keep the number of fields to a minimum. Secondly because I'm not convinced that those "confirm your... whatever" fields actually accomplish much (although I can see more value in a "confirm your password" field than a "confirm your email address" field).
I think the presence of the "forgotten your password?" link takes care of the contingency that someone incorrectly entered their password to begin with. They can click that link and request a reset link to be sent to their email address. But I believe that those people would be in the minority so rather than make everyone confirm their password to begin with, I think it's best to deal with the edge cases as they arise.
I think that these kind of sign-up details need to be handled on a site-by-site basis. I don't think there's a right or wrong way to do it for all sites—it depends on the audience. Given the tech-savvy nature of the main activity on Huffduffer (podcasting), I'm going to assume a reasonable level of tech-savviness on the part of the people signing up for it.
If I'm proven wrong and lots of people are entering their chosen passwords incorrectly in the sign-up form, I'll amend it accordingly. Time will tell.
adactio replied on October 20, 2008 17:21 to the question "Why add links to Elsewhere without asking?" in Huffduffer:
adactio replied on October 20, 2008 00:20 to the idea "More interaction?" in Huffduffer:
adactio replied on October 19, 2008 23:41 to the problem "404 Error in welcome email." in Huffduffer:
adactio replied on September 25, 2008 13:27 to the problem "Automatically posting to twitter - bad." in My Name is E:
Words can't express how bad this practice is.
It's bad enough that mynameise is using the password anti-pattern. What they then do with that information is confirmation of what makes this such so dodgy.
Sending a twitter message from somebody else's account is effectively a form of identity theft, akin to sending an email from somebody else's account.
A comment on the problem "Why does Pownce keep killing kittens with the password anti-pattern?" in Pownce:
So... this must be some new definition of "near future" that I'm unfamiliar with. – adactio, on September 24, 2008 01:16
adactio reported a problem in Plaxo on August 04, 2008 10:08:
Receiving email from Plaxo even after deleting my account.I deleted my Plaxo account last week because I was fed up with the site using the password anti-pattern (asking for third-party email passwords).
Today I received an email from Plaxo asking me to take part in a survey. The email included a link to manage "communication preferences" but that leads to a page that is "experiencing technical difficulties."
Does Plaxo hold on to email addresses for marketing/spam even after an account is deleted? Am I doomed to get emails from Plaxo forever?
adactio replied on August 01, 2008 11:16 to the question "Recommendations on video editing software?" in Clearleft:
adactio set one of adactio's replies as an official response to "Recommendations on video editing software?" in Clearleft
adactio replied on July 27, 2008 12:55 to the problem "too-clever way to advertise your product?" in Clearleft:
A comment on the problem "Why does Pownce keep killing kittens with the password anti-pattern?" in Pownce:
Yay! – adactio, on July 19, 2008 12:45-
adactio started following the idea "OpenID Support" in Pownce.
adactio reported a problem in Pownce on July 15, 2008 10:06:
Why does Pownce keep killing kittens with the password anti-pattern?C'mon guys. It's been long enough now. There are APIs available for Google and Hotmail. You've already got it working for Yahoo (bravo!). There really isn't any excuse for asking someone to hand over their email password anymore.
Won't somebody stop the slaughter?
A comment on the question "Asking for 3rd party passwords" in SlideShare:
Amit, I think you're missing the point. By telling your users that it's perfectly acceptable for them to divulge the passwords for their email accounts on a third-party website like Slideshare, you are effectively teaching them how to be phished.
I'd be interested in hearing how your internal discussions are going, particularly in light of the fact that all three providers that you are slurping from (GMail, Hotmail and Yahoo Mail) offer secure authorization now. See Flickr's example of how to do this the *right* way: http://www.flickr.com/import/people/ – adactio, on July 08, 2008 13:13
| next » « previous |
Loading Profile...


