- 0 Posts
- 9 Comments
3·1 month agoThe hbo animated Ricky Gervais show won me over. I would have agreed with you before that but it is actually hysterical.
1·1 month agoThis is precisely why you should really consider leaning into oauth, your users don’t want another unique password to manage, so guess what, when your creds database gets leaked, it’s not just your site that’s getting screwed.
Look, with new ai tools, security is a very scary place to live. I wouldn’t blow this off. Let the companies that invest millions in it manage this piece for you.
I wouldn’t change my advice. Even if you go Argon2id, you still have a creds database to protect. If you let that go it’s just a matter of time before it’s useful.
You could go webauthn, but now we are back to passkey or windows hello or whatever. Which is what I told op, they invented passkey, and it’s Still third party reliance.
Source: I’ve been a software architect for 25 years.
You just invented passkey with oauth.
Sorry, yes it is. I’d really prefer it if software developers would take this more seriously. Managing user credentials is a high risk burden that you should avoid if possible.
7·2 months agoKeep him. If you want to do business here you fuck, you’ll pay taxes here.
lol I thought about doing this, but mostly in a cynical asshole way. Super fun that some idiot did it in earnest
deleted by creator