541 reputation
512
bio website
location Minsk, Belarus
age 23
visits member for 2 years, 10 months
seen Nov 10 at 5:51

Apr
2
comment Is it OK that url is changed after invalid submit of form?
Redirecting from /users/new to /users when data is invalid is default behavior in Rails
Mar
29
comment Should link to restore user account lead him to login page?
Email is used to send you a Forgot Password link that is sent in plain text
Mar
29
comment Should link to restore user account lead him to login page?
If strength of unguessable token is more than 128 bits, bruteforce won't give anything as all computers in the world aren't able to perform so many operations even if they will work tens of years
Dec
20
comment What is the best way to inspire users to choose strong password?
Attacker may control botnet
Dec
20
comment What is the best way to inspire users to choose strong password?
If attacker has the same IP as ordinary users, he can constantly hit servers with invalid login attempts. Thus he will prevent access of all other users to your site creating login DoS for them. Users will likely to be frustrated by your site and will go to find other one.
Dec
19
comment What is the best way to inspire users to choose strong password?
Many users under NAT can have the same IP