Mr Lovenstein | Mastodon | Patreon

Secret Panel πŸ’¦

Transcript4 Panel Comic

Panel 1: A doctor lifts up a healthy baby in front of a tired mom

Doctor: Welcome to the world, little guy!

Panel 2: The doctor holds the child up in front of a tablet

Doctor: You need to create a life account

Panel 3: The baby is frustrated as the tablet rejects the input

Tablet: Sorry, that username is taken

Panel 4: The baby facepalms as the tablet needs even more info to create the account

Tablet: You need to make an email account for Two-Factor Authentication

Secret Panel: The baby sweats as the tablet continues

Tablet: Enjoy your 30 day trial of life. After-which, there is a monthly charge.

you are viewing a single comment's thread
view the rest of the comments
[–] 52 points 1 month ago* (9 children)

Today a site required me to make a username that must not share any of the letters in my name and must have a number in it, with a password that needed six non-consecutive numbers.

Please crawl out of my ass and leave me be, infosec.

  • source
  • hideshow 9 child comments
  • [–] 21 points 1 month ago* (last edited 1 month ago)

    must not share any of the letters in my name and must have a number in it, with a password that needed six non-consecutive numbers

    Reminds me of the first time I applied online for an ESTA visa to visit the US: It said that I had to enter my name exactly as it is on my passport but with only the letters of the English alphabet, which is contradictory to the point of impossibility.

    On a subsequent trip, I was stuck in Phoenix' Moon Moon (officially Sky Harbor Airport) for several hours and missed my flight because the check in machine couldn't deal with that same non-English letter and there was around a million passengers per employee to help resolve such issues 🀦🏻

  • source
  • parent
  • [–] 18 points 1 month ago (5 children)

    The letters thing is horrible. That must be one of the easiest sites to hack. You're reducing the options by a significant amount. Make sure you don't give them any information important to you.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 3 points 1 month ago (4 children)

    You're correct, but unless they are directly targeted normally the attempts made are all from scans and those scans do not know this information so it shouldn't matter that much.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 1 month ago (3 children)

    Yeah, it's not an issue until it's an issue. I have no idea what company is doing this, but I wouldn't trust them with a credit card, PII, or almost anything else. I wouldn't put it past them to be storing the password, and anything else, in plaintext.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 4 points 1 month ago (2 children)