How an application is kept secure to prevent unauthorized access.

learn more… | top users | synonyms

1
vote
1answer
199 views

Best practice for two-step verification process

Perhaps due to the recent incidents behind hacking of user database and identity theft, many organizations have introduced the two-step verification process, in particular when users are accessing the ...
1
vote
1answer
52 views

displaying the actual encrypted data or replace its value with wild card

So we have a column on a table where we display different user names and their recent daily activities. The admin has the option to encrypt the actual user names due to privacy concerns. The current ...
1
vote
3answers
356 views

What happens in a web browser when a download is started via Javascript?

In a web browser, a download can be initiated immediately after user input, or started via Javascript after a set amount of time and/or being redirected to another page. I want to provide users with ...
1
vote
1answer
88 views

Installing recording software

On an upcoming visit to a user's place of work, I would like to have them install Morae Recorder beforehand. This is likely to be a problem for the user's IT Security people. In the past, especially ...
1
vote
1answer
122 views

Is there an established way of representing Single Sign On with an icon? [closed]

I'm wracking my brains trying to think of representing Single Sign On iconographically. Is there a common way this is done?
0
votes
3answers
294 views

Should a web browser indicate “year” near the lock icon to encourage more safe/secure website?

There are many important technologies coming to web browsers in the next few years. Not to mention that where we are today is a culmination of lessons learned and several security pitfalls. However, ...
0
votes
1answer
56 views

Inform user of invalid email on password reset

Should the user be told if they enter an email which is not in the database? User forgets their password and clicks a link to reset it. Page displays "An email was just sent out to youremail@bla.com ...
0
votes
1answer
78 views

Optional password field on login

We want all users to enter their employment ID so we can identify them, but it's not so important that we require them to register or remember a password. Some users will be registered for the ...
0
votes
2answers
563 views

Usability vs. Security [closed]

This question has started to preoccupy since read Stevey's Google Platforms Rant by Steve Yegge. (The original post was removed.) Among many other things he asserts that usability is more important ...
0
votes
1answer
70 views

Are there any good guidelines to how many passwords a user can safely remember?

In an ideal world we each would have one password to remember, and that would be a strong password and we would change it every month or so. But we don't live in an ideal world, and we have to access ...
0
votes
1answer
64 views

What makes a download link in email feel legit?

I'm creating a web app where users can provide snapshots of the page they are viewing and share them via email in a downloadable format. What are best practices for creating a sense of security for ...
0
votes
1answer
30 views

How to encourage users to download an app to complete strong authentication (two factor)

I'm designing a strong authentication (two factor) solution for a website. Users will be forced to use two factor (legal requirement). We have two supported methods an SMS verification code texted to ...
0
votes
2answers
51 views

Impact of images and icons on user perception when capturing personal information?

I am designing an account area where users are required to provide some personal information.I have came across research that suggests that the use of icons such as a "Padlock" or similar has a ...
0
votes
2answers
67 views

Why does verizon have me confirm my authorization code when adding a device? [closed]

What purpose does the second entry serve? Why are they making us go through the hassle of entering in a random character string twice, when we can clearly see it the first time we type it in?
0
votes
1answer
110 views

Security questions vs secret password/passcode when logging in or retrieving login details?

I am currently in the process of re-designing a login process which uses security questions to verify the identity of users before they are successfully logged in, and also to allow them to reset ...
0
votes
2answers
395 views

Why do some cars only have a physical lock on the driver side?

I have a car (tsx) and I realize that sometimes I will need to use the physical key instead of the electronic key fob to unlock my car. Such as if there is something wrong with the electronics or my ...
0
votes
1answer
73 views

What's the best type of car key? [closed]

Everyone is familiar with the regular physical key and lock for their car. But nowadays, new cars have all kinds of fancy key fob systems to lock and unlock their car. But what is the best in terms ...
0
votes
3answers
64 views

Contact us link: should a user be forced to log in right away?

Let's pretend we're a university optometry department and the tech support/contact us link on our website can be accessed by optometrists, their staff members, and patients alike. A patient is ...
0
votes
1answer
83 views

Any good examples of a user signing up for a Browser Certificate / Client Certificate?

A client certificate is something that is used with TLS/SSL to increase security of the HTTPS session. There are two parts to this The user needs to create the certificate, have it approved (which ...
0
votes
2answers
126 views

User testing browser add-on

I'm working on a browser add-on that has some novel usability ideas, and I'd like to test them out on some users. The add-on interacts with the user's password data and usage, and I'd like to collect ...
0
votes
0answers
8 views

what is the best way for a user to securely share from a public device & app?

what is the best way for a user to securely share from a public device & app (kiosk-like), instead of just emailing to themselves under an anonymous user account? I need some UX advice and ...
0
votes
1answer
101 views

How to manage credentials information to the user?

I've created a plugin for an editor. This plugin gets some information from the project and shows you all the related issues, getting the information from an external application (Github, gitlab, ...