Security doesn't (always) have to be so fucking annoying
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
A blog post by security consultant Joshua Harrison (joshua.hu) argues that many common website security measures, like blocking password pasting, masking email addresses in reset flows, locking accounts after failed logins, and disabling right-click, inconvenience legitimate users while doing nothing against attackers.