Tag Info

New answers tagged

5

Security engineer / usable security researcher here. Most often the security advice handed out to website makers is not evidence-based, and even though we have plenty of knowledge and data about passwords, we know little about what makes them work. If you wonder why they're still around, Herley and Oorschot's 'A Research Agenda Acknowledging the Persistence ...


1

Can I make the process better? Yes. Just give them a password field: Password [ ] If they want to use a passphrase, a password, or just 12345678, let them. If you have to have some level of checking, then perhaps implement some minimum criteria, but for the most part, password requirements are usually more of a pain point than ...


3

Lets start with the essential, whatever solution you choose to go for, test, test and test again... its worth every effort! Now to the core of your question: Passphrase vs Password Passphrases are great way of dealing with forgotten passwords as they are generally "generated" from user memory and might also remind user of a specific situation or ...


1

While you can re-process server side, it is a waste of your processing power. In addition, the markdown spec allows the insertion of arbitrary HTML, so unless you disable that you will be just as insecure. This forum is about UX, and your UX will be enhanced by the live preview. Out of the scope of this forum but necessary to answer your question: On the ...


2

Your tree structure and your colleague's hierarchical dropdown fields are essentially doing the same thing but personally I think the tree method is less abstrct and less fiddly. Taking your wireframes as a starting point, I would show the Organisations/Departments, Groups and Users search interfaces in 3 separate tabs (to avoid having lots of things ...


1

If I got you right, what you are looking for is an Identicon. It is similar to the text based representation you mentioned, and it's widely used on the web (take Stack Exchange for example). Here is an example:


1

We're dealing with this on a regular basis. We solved it by making the page blazing fast, inputting logic on the front side (for incorrectly or missed input fields), and then kicking back errors fast. Having dynamically updating pages is great. In fact, we're not using Javascript at all on our web forms (and we should be...we'll get there!) which is a ...


1

This is a good approach however I would limit the number of attempts and then not let them guess again. Lets say you stole someones credit card information digitally. All your missing is the cvc number. One could easily use the number then brute force the CVC if they get infinite attempts. Even with the 30 seconds I could write a distributed script that runs ...


0

Seems like it is not easy to get an answer to this question, but I think it has to do with the way it is being asked. Instead I'll provide some general guidelines that will help you to work out a solution. In infographic design, there are a few key points that you need to work in with general visual design principles: Be faithful to the original ...



Top 50 recent answers are included