Tag Info

New answers tagged

1

In order to spur users to action, I would put the solution directly in their face. Tell them about heartbleed (in a calm manner) and offer them the option to change the password immediately. Why ask them to navigate all the way to wherever they can reset their password when you can bring the form to them. Wait for them to log in, and give them a simple ...


1

What level of security required is not a UX question. Rather it is a threat modelling exercise that will tell you how much you should demand the user changes their password. Once you have determined the degree of risk then what do you want to drive? A rational decision based on the risks. Users can do that providing they are not confused. Examples below ...


2

We took the transparent approach and posted a notification inside our application for all administrators - we told them we WERE running the affected version of OpenSSL, we told them what we did, when we did it and why. We also told them there is no indication of anything untoward but due to the nature of Heartbleed this is expected though we did still spend ...



Top 50 recent answers are included