Conversation

Notices

1. Embed this notice
   draNgNon (drangnon@hachyderm.io)'s status on Tuesday, 16-Jan-2024 09:28:02 JST draNgNon

   • Matthew Lyon

   @mattly

   antipatterns:
   a) common and I know you hate it too: do not allow paste into the password box
   b) less common but extremely enraging: do not allow 2FA pin to be entered from the num pad on an extended keyboard
   c) convenience isn't worth it: ditch the "remember me on this computer"
   d) epic's two-way connecting of two myhealth systems, one of which requires 2FA and one which doesn't offer it.

   counterbalance with a good pattern: ask for the 2FA before prompting for the password

   • Embed this notice
     draNgNon (drangnon@hachyderm.io)'s status on Tuesday, 16-Jan-2024 09:33:03 JST draNgNon

     • Matthew Lyon

     @mattly it hit me a couple months ago and I could NOT understand why I was only able to log in from my laptop... when I finally figured it out I was having a great despair

   • Embed this notice
     draNgNon (drangnon@hachyderm.io)'s status on Tuesday, 16-Jan-2024 09:43:51 JST draNgNon

     in reply to

     • Matthew Lyon

     @mattly oh oh the other one, this is a more complex sequence

     1. try to log in from a link in a legit email
     2. fail. tell it to send you password reset email
     3. "invalid email address" / "no such email address in our records"
     4. "too many log attempts you are locked out"
     5. 🤔 lock out the "unknown" email address, hm?

     I am perma-stuck in that situation with a couple online accounts. one is a bank, and I had a VC meeting with the bank rep, and it still could not be fixed.

   • Embed this notice
     draNgNon (drangnon@hachyderm.io)'s status on Tuesday, 16-Jan-2024 11:19:40 JST draNgNon

     • Matthew Lyon

     @mattly I can literally get the email for resetting the password, click on the link in the email, and be told that email address that was just mailed is unknown to the system. for (I hope) obvious reasons I am not posting a screenshot/video grab of it.

     separately, mychart/epic is a nightmare of inconsistency from separate providers. perhaps add to your bingo: separate paths to login to account with different levels of security/2FA

     anyhow it's all an excellent reminder why we have: ¯\_(ツ)_/¯

   • Embed this notice
     draNgNon (drangnon@hachyderm.io)'s status on Tuesday, 16-Jan-2024 11:26:31 JST draNgNon

     • Matthew Lyon

     @mattly oh I saw you posting about that. Ugh, but DMCA? did you copyright all your photos?