Risk mitigation of user name guessing is not done by obtuse error messages displayed back to the user. If you want to mitigate this risk, you need to use data.
Posts Tagged ‘don’t do this’
Login forms are broken in ruby on rails
Posted in software security, software usability, tagged don't do this, risk management, usability, security, ruby on rails on August 14, 2009 | 10 Comments »
Be Careful When You Remove Features
Posted in software development methodology, tagged don't do this, features, twitter on May 17, 2009 | Leave a Comment »
Almost on queue, Twitter has recently done (twice!) what I’ve been thinking about lately. They have removed features. Removing features is very tricky and fraught with problems, even if those features are used by very few people.
One too many searches
Posted in software usability, tagged don't do this, usability on March 27, 2008 | Leave a Comment »
I was messing around with the new Photoshop Express gizmo today and I clicked the help link. It opened a new window to this page which looks like this screenshot (for those who dun wanna click.)
+ (plus) don’t get no respect
Posted in programming, tagged don't do this, email on March 11, 2008 | 2 Comments »
With gmail and fastmail, and other email systems, you can use plus notation to keep track of who is passing around your address. When I sign up for something online, I’ll often use myaddress+domain@fastmail.fm as my address. This address simply works and I receive the wanted email. If they sell/hand over my address, then I’ll [...]
Philip is…
Often reading, thinking about, or doing risk management, software, economics, snowboarding, running and/or ping pong.
-
Recently
Tags
-
Recent Comments
My Work
On Twitter
- I endorse @gl33p for strategy because Preston has helped hundreds of organizations with their internet strategy. @imby 3 months ago
- Lots of people seem to have drunk the kool-aid on Pivotal Tracker. I have no idea why. I'll take Roundup any day over it. 8 months ago
- Looking forward to #lessconf and #bcjax this weekend. Hammering hard getting the todo list cleaned up. 9 months ago
- "Software teams are more likely to succeed using techniques similar to movie production, rather conventional engineering projects" (IBM) 9 months ago
- RT @KevinSwiggum: Is today code like a pirate too? List<Matey__c> = Ship.getMateys(); fer (mateys : ye) { avast(ye);} 10 months ago
