How an application is kept secure to prevent unauthorized access.

learn more… | top users | synonyms

1
vote
3answers
82 views

Good way to help the user remembering the password strategy [duplicate]

Nowadays sites have different password strategies. In example: Facebook: 6 characters min, no restriction Ameli.fr: 8 characters min, all should be numbers. StackExchange: 8 characters min, upper ...
1
vote
2answers
87 views

Does a crime security alert app need its users to register?

I was asked to work on a police security alert system as a school project. The app notifies a user about security info and lets users (citizens of a place) notify police agencies around them. I was ...
1
vote
1answer
61 views

Displaying the actual encrypted data or replace its value with wild card

So we have a column on a table where we display different user names and their recent daily activities. The admin has the option to encrypt the actual user names due to privacy concerns. The current ...
1
vote
2answers
122 views

UX failure in Apple's security update process

It would have been much better if I could download the 700+ MB download in the background while continuing to work and THEN pull the trigger on applying the patch. There are no real reasons to couple ...
1
vote
2answers
424 views

Should I show a customer granular credit card errors?

When credit cards are declined, our gateway usually provides a useful reason: insufficient funds, CVV mismatch, invalid card number, etc. Should we show this to the user? Or should we just show a ...
1
vote
1answer
67 views

Can you use similar security questions used on email registration for a more corporate tool?

I am developing a set of security questions for a corporate website. The usual security questions I come across are mothers birthplace, best childhood friend, ect. These questions don't seem fitting ...
1
vote
1answer
65 views

Hierarchical display of categories when the user is not exploring

We are making an in-house application intended for sharing know-how. It is a sensitive topic, because sharing with one's business partners makes work easier, but there are many (politically powerful) ...
1
vote
2answers
38 views

Dynamic Billing Information Validations In Checkout System

I'm unsure if this is more of a UX or security oriented question, but here goes nothing. I'm currently trying to simplify my e-store's checkout process by adding dynamic client side validations using ...
1
vote
1answer
86 views

How to encourage users to download an app to complete strong authentication (two factor)

I'm designing a strong authentication (two factor) solution for a website. Users will be forced to use two factor (legal requirement). We have two supported methods an SMS verification code texted to ...
1
vote
1answer
1k views

Prevent Active Directory password expiration when user never logs in

Let's assume the following in a hospital: Each nurse has her own Active Directory user, with a password. The password expires automatically 90 days after the password was set. A nurse uses her own ...
1
vote
2answers
217 views

How does the perception of website data being insecure affect usability?

If the user perceives that data entered into a website is insecure (if it is perceived that it can be hacked, stolen or tampered with), how is the usability of the site affected? This question is in ...
1
vote
1answer
33 views

How best to provide contact info in a member directory while preventing 'data harvesting'?

I am working on a searchable online directory. People will use it to find other members, service providers, and the like. It's critical that the results include contact data. However, my clients are ...
1
vote
1answer
239 views

Best practice for two-step verification process

Perhaps due to the recent incidents behind hacking of user database and identity theft, many organizations have introduced the two-step verification process, in particular when users are accessing the ...
1
vote
3answers
370 views

What happens in a web browser when a download is started via Javascript?

In a web browser, a download can be initiated immediately after user input, or started via Javascript after a set amount of time and/or being redirected to another page. I want to provide users with ...
1
vote
1answer
92 views

Installing recording software

On an upcoming visit to a user's place of work, I would like to have them install Morae Recorder beforehand. This is likely to be a problem for the user's IT Security people. In the past, especially ...
1
vote
0answers
67 views

MarkDown Editor : Client side or Server Side or Both? [closed]

Planning to implement MarkDown Preview UI + Markdown Support for a chat application in development. Web framework is python-tornado MarkDown Lib i am looking is : remarkable (Faster than commonmark ...
1
vote
1answer
132 views

Is there an established way of representing Single Sign On with an icon? [closed]

I'm wracking my brains trying to think of representing Single Sign On iconographically. Is there a common way this is done?
0
votes
3answers
315 views

Should a web browser indicate “year” near the lock icon to encourage more safe/secure website?

There are many important technologies coming to web browsers in the next few years. Not to mention that where we are today is a culmination of lessons learned and several security pitfalls. However, ...
0
votes
2answers
633 views

Usability vs. Security [closed]

This question has started to preoccupy since read Stevey's Google Platforms Rant by Steve Yegge. (The original post was removed.) Among many other things he asserts that usability is more important ...
0
votes
3answers
100 views

When entering data, should the user be authenticated on clicking “Create” or “Save”?

Having the two options: Check if user authenticated upon "Save" button click (when the input dialog is shown and filled in with the data) Check if user authenticated upon "Create" button click ...
0
votes
1answer
94 views

Optional password field on login

We want all users to enter their employment ID so we can identify them, but it's not so important that we require them to register or remember a password. Some users will be registered for the ...
0
votes
1answer
85 views

Are there any good guidelines to how many passwords a user can safely remember?

In an ideal world we each would have one password to remember, and that would be a strong password and we would change it every month or so. But we don't live in an ideal world, and we have to access ...
0
votes
1answer
71 views

What makes a download link in email feel legit?

I'm creating a web app where users can provide snapshots of the page they are viewing and share them via email in a downloadable format. What are best practices for creating a sense of security for ...
0
votes
2answers
70 views

Impact of images and icons on user perception when capturing personal information?

I am designing an account area where users are required to provide some personal information.I have came across research that suggests that the use of icons such as a "Padlock" or similar has a ...
0
votes
2answers
97 views

Why does verizon have me confirm my authorization code when adding a device? [closed]

What purpose does the second entry serve? Why are they making us go through the hassle of entering in a random character string twice, when we can clearly see it the first time we type it in?
0
votes
1answer
133 views

Security questions vs secret password/passcode when logging in or retrieving login details?

I am currently in the process of re-designing a login process which uses security questions to verify the identity of users before they are successfully logged in, and also to allow them to reset ...
0
votes
2answers
700 views

Why do some cars only have a physical lock on the driver side?

I have a car (tsx) and I realize that sometimes I will need to use the physical key instead of the electronic key fob to unlock my car. Such as if there is something wrong with the electronics or my ...
0
votes
1answer
87 views

What's the best type of car key? [closed]

Everyone is familiar with the regular physical key and lock for their car. But nowadays, new cars have all kinds of fancy key fob systems to lock and unlock their car. But what is the best in terms ...
0
votes
3answers
66 views

Contact us link: should a user be forced to log in right away?

Let's pretend we're a university optometry department and the tech support/contact us link on our website can be accessed by optometrists, their staff members, and patients alike. A patient is ...
0
votes
1answer
85 views

Any good examples of a user signing up for a Browser Certificate / Client Certificate?

A client certificate is something that is used with TLS/SSL to increase security of the HTTPS session. There are two parts to this The user needs to create the certificate, have it approved (which ...
0
votes
2answers
138 views

User testing browser add-on

I'm working on a browser add-on that has some novel usability ideas, and I'd like to test them out on some users. The add-on interacts with the user's password data and usage, and I'd like to collect ...
0
votes
1answer
34 views

How should I visualize a name mismatch for a SSL website?

I am writing custom security software and need to design a better method for a name mismatch... where the server certificate doesn't match the address in the URL. How should I visualize this to the ...
0
votes
0answers
17 views

what is the best way for a user to securely share from a public device & app?

what is the best way for a user to securely share from a public device & app (kiosk-like), instead of just emailing to themselves under an anonymous user account? I need some UX advice and ...
0
votes
1answer
153 views

How to manage credentials information to the user?

I've created a plugin for an editor. This plugin gets some information from the project and shows you all the related issues, getting the information from an external application (Github, gitlab, ...