Mr Lovenstein | Mastodon | Patreon

Secret Panel 💦

Transcript

4 Panel Comic

Panel 1: A doctor lifts up a healthy baby in front of a tired mom

Doctor: Welcome to the world, little guy!

Panel 2: The doctor holds the child up in front of a tablet

Doctor: You need to create a life account

Panel 3: The baby is frustrated as the tablet rejects the input

Tablet: Sorry, that username is taken

Panel 4: The baby facepalms as the tablet needs even more info to create the account

Tablet: You need to make an email account for Two-Factor Authentication

Secret Panel: The baby sweats as the tablet continues

Tablet: Enjoy your 30 day trial of life. After-which, there is a monthly charge.

  • binarytobis@lemmy.world
    57·
    5 days ago

    Today a site required me to make a username that must not share any of the letters in my name and must have a number in it, with a password that needed six non-consecutive numbers.

    Please crawl out of my ass and leave me be, infosec.

    • Viking_Hippie@lemmy.dbzer0.com
      23·
      5 days ago

      must not share any of the letters in my name and must have a number in it, with a password that needed six non-consecutive numbers

      Reminds me of the first time I applied online for an ESTA visa to visit the US: It said that I had to enter my name exactly as it is on my passport but with only the letters of the English alphabet, which is contradictory to the point of impossibility.

      On a subsequent trip, I was stuck in Phoenix’ Moon Moon (officially Sky Harbor Airport) for several hours and missed my flight because the check in machine couldn’t deal with that same non-English letter and there was around a million passengers per employee to help resolve such issues 🤦🏻

    • Cethin@lemmy.zipEnglish
      18·
      5 days ago

      The letters thing is horrible. That must be one of the easiest sites to hack. You’re reducing the options by a significant amount. Make sure you don’t give them any information important to you.

      • HeyJoe@lemmy.world
        3·
        5 days ago

        You’re correct, but unless they are directly targeted normally the attempts made are all from scans and those scans do not know this information so it shouldn’t matter that much.

        • Cethin@lemmy.zipEnglish
          2·
          5 days ago

          Yeah, it’s not an issue until it’s an issue. I have no idea what company is doing this, but I wouldn’t trust them with a credit card, PII, or almost anything else. I wouldn’t put it past them to be storing the password, and anything else, in plaintext.

            • Cethin@lemmy.zipEnglish
              2·
              4 days ago

              No fucking way! That’s insane. I’d create a ticket through support if I were you. That is absolutely unacceptable.

              • withabeard@feddit.uk
                2·
                4 days ago

                I guarantee you the person that was tasked with building the system knew this was unacceptable and was told to get on with it by laters of middle management.