New answers tagged security
-1
It's a reminder, in some certain situations we might forget, it's better to have it there...
8
These "security" devices hurt user experience.
Some of the hacking/security "industry" guides suggest manually completing one of these CAPTCHA mechanisms as a person before allowing your interactive program to interface with the target site or application. This means that once you're authenticated as a person most sites assume you will still behave as a ...
0
There are various apps/programs out there which can detect the captcha and help you automate various tasks. These beat the reason for using the captcha - 'Human verfication'
Some other approaches which people have tried is, using match captcha:
Among others are using 3D images and even asking the user to quote the add.
Moving captcha are a step in the ...
2
The goal of captcha is to have a task that is easy for a person to do, but hard (or impossible) for a computer to do. The problem is that computer programs have been developing, and they can now pass many captcha systems. As a response captcha systems have had to evolve more difficult tasks, which are frustrating to decipher.
The benefit of simple ...
10
Here's the goal of a CAPTCHA from Wikipedia:
These tests are designed to be easy for a computer to generate but
difficult for a computer to solve, but again easy for a human.
The CAPTCHA you are referencing is easy for us to understand and far easier than the path that static CAPTCHAs have been going down:
Imagine the difficulty a person with poor ...
0
That statement is kept in its place mainly for first time users who haven't yet understood the requirement of a password. Another reason for that would be so that the owner of the site can avert any responsibility in case of passwords getting hacked due to reasons other than the obvious security failure of the website. As you may already know, experienced ...
0
It is actually obvious, as we observe that the chat/ social forums/ or any other site!
The sites are free to open an account (in most cases). So any one can open an account with fake details/fake account created on another mail hoster(as only email verification is taken as to avoid unauthorized users).
In this case some new users who is new to IT, mostly ...
0
The number of passwords I've been given unsolicited over the years is amazing--yet in almost all cases I make it clear I want the person to do the login themselves rather than giving me the password. The only time I can recall actually asking for a password was when I didn't want to have to TeamViewer into their system in order to manipulate yet a third ...
8
I was surprised to learn that teenagers share passwords much more than I expected.
So maybe for some demographics, it is necessary to reinforce more secure behavior.
6
The evils of the modern information age.
Chat programs, e-mail programs, and most non-SSL web pages transfer information back and forth in a clear text format. This means that it's non-encrypted and readable by anyone with access to the text.
Even though the network your computer is connected to seems like a physical straight connection to the router or ...
39
Most security breaches are from social engineering, and so telling someone that they should never under any circumstances give anyone their password is an attempt to increase security. I would suggest a statement more like:
If anyone asks you for your password, you should assume they are a criminal and report it immediately!
Idea provided by @Kaz
As ...
0
Imagine that you don't show that message and an employee, during support, asks and the person reveals such information. And, probably, after some time, your company is sued and looses. Bad situation.
You can also imagine that you show such message, your employee asks anyway, the person provides it, etc... probably you'll be sued anyway, because your ...
3
It's definitely a "better safe than sorry" tactic, but I feel that these messages are meant more for the non-tech savvy user.
I've worked with several older clients that are simply unaware of such vulnerabilities.
Ultimately, it also depends on the audience of the site. I doubt github or stack exchange will have such messages.
However, if you're a bank, ...
4
It's a practice perpetuated by corporate legal counsel and made somewhat necessary by our litigious society. It is silly and slightly insulting but, fortunately, we all do it so we all look equally insulting.
73
A better modification of such a statment which I see being used is:
'A company_name employee will never ask for your password'
This message alerts the user that if the person is asking for a password, there is something fishy and he should alert the concerned authorities immediately. With all the live chat functionalities that most industries are ...
Top 50 recent answers are included
