Reputation
204
Top tag
Next privilege 250 Rep.
View close votes
Badges
2 11
Newest
 Yearling
Impact
~907 people reached

Feb
29
awarded  Yearling
Dec
10
awarded  Teacher
Nov
22
comment Banned user tries to log in − show a “Banned” message or a generic “Cannot log you in”?
[cont] Point being, you mentioned that "someone will somewhere forget to put" in the check, and my point is that the CheckLimit() checks are already in place. They must already be in place otherwise there would have been a security bug because without the function check, users would be able to do unlimited actions. We need only to add the extra code within the CheckLimit() function one time.
Nov
22
comment Banned user tries to log in − show a “Banned” message or a generic “Cannot log you in”?
@corsiKa, No I mean it's precisely because of this reason. Because the user/hacker could have built his own custom UI that sends direct network requests, therefore each and every user action must have a function CheckLimit() which denies the request if there there are too many requests previously. CheckLimit() is done even for simple stuff like loading a webpage. (for example just try to spam Google or even SE, you'll get a few minutes of network ban whenever you had requested to load too many pages within a fixed amt of time).
Nov
22
comment What is the difference between Scenario and User Journey?
@FrankL, @​Charles, Hmm, I've I've seen the term "scenario" used to describe what you are describing as "user journey" too. For example, we have a scenario: "the user is drunk but he needs to send an email by 12:00 midnight".
Nov
13
comment Banned user tries to log in − show a “Banned” message or a generic “Cannot log you in”?
@MarioTrucco, Because usernames do not contain (are not meant to contain) secure information. This is comparable to transparent crystallographic systems whereby the security depends entirely on the password and the password alone. It's a security risk only if the username is leaky, for example usernames like PwdIsTheNameOfAFruit or PwdIsMyUsername.
Nov
13
comment Banned user tries to log in − show a “Banned” message or a generic “Cannot log you in”?
@corsiKa, The checks are crucial for rate limiting users to actions. If you simply fetch for a user cookie, that user can do unlimited actions as fast as his network can handle (or your server CPU can). Which can easily be 1000 actions per second using a bot. Note that the user can easily bypass the game UI since the server would also see network requests and not be able to differentiate them without extra checks.
Nov
8
comment Why do sites like stackexchange have users sign up for each site?
@SethGunnells, "Waste of space"? It's not a waste of space because the users are already created in the umbrella stackexchange.com site. Besides the "space" you are talking about is simply one table with integers doing the linking. That's hardly anything in the grand scheme of things. The concerns of "strange to show information about you in that site" is also non existent. See ux.stackexchange.com/questions/61488/… for explanation.
Nov
8
comment Why do sites like stackexchange have users sign up for each site?
@Hynes, The concerns of Point 2 is non existent. There's nothing stopping the "account" from being hidden until the user click "Activate account on this sub SE site" button.
Nov
8
comment Why do sites like stackexchange have users sign up for each site?
The main reason why SE uses multiple registration is because it's easier to do so from their existing code base at that time.
Nov
8
comment Banned user tries to log in − show a “Banned” message or a generic “Cannot log you in”?
@corsiKa, Well, if the app is indeed designed properly, "check everywhere for someone being banned" could be as simple as one function that is reused everywhere. You would need functions to do checks anyway to prevent "unlimited actions" or spam. Stuff like vote limit, post limit, search refresh limit, page load limit, and etc.
Nov
8
revised Should a toggle button show its current state or the state to which it will change?
deleted 3 characters in body
Nov
8
comment Banned user tries to log in − show a “Banned” message or a generic “Cannot log you in”?
@user5482, Not "security", but privacy.
Nov
8
comment Open the folder vs show in explorer?
@Yamikuronue, Yea, but what would a UX engineer be doing in SQA?
Nov
8
comment Is it better to center align section headings or left align?
@dnbrv, That's 5 minutes multiplied by 1936 readers. Even if we go out on a limb and assume that readers have the same context as the writer.
Nov
8
comment How could you prevent users from leaving their original copy in the photocopier?
Beeping is also what ATMs use in Singapore to remind you to take your card after taking your cash.
Nov
8
comment Open the folder vs show in explorer?
@Yamikuronue, Hi, btw what do you mean by "UX engineer in Software Quality Assurance"? (as stated in your profile page)
Nov
8
comment Toggle Buttons “Turn On” vs “Enable”
@anthonyryan1, Also see my suggestion on ux.stackexchange.com/a/86746/5362
Nov
8
comment Add question form - mark answer as correct
@zehelvion, Another suggestion is to use a checkbox instead of radio buttons.
Nov
8
comment Up arrow for increase, Down arrow for decrease, what for no change?
Using a right or left arrow suggests a change is going on when there are none.