Mr Lovenstein | Mastodon | Patreon
Secret Panel 💦
Transcript
4 Panel Comic
Panel 1: A doctor lifts up a healthy baby in front of a tired mom
Doctor: Welcome to the world, little guy!
Panel 2: The doctor holds the child up in front of a tablet
Doctor: You need to create a life account
Panel 3: The baby is frustrated as the tablet rejects the input
Tablet: Sorry, that username is taken
Panel 4: The baby facepalms as the tablet needs even more info to create the account
Tablet: You need to make an email account for Two-Factor Authentication
Secret Panel: The baby sweats as the tablet continues
Tablet: Enjoy your 30 day trial of life. After-which, there is a monthly charge.
You must log in or # to comment.
It took me a while to realize that they did a face palm in the forth panel, somehow, I thought it was their nose.
It explains a lot of the usernames as names people are assigning their kids.
Today a site required me to make a username that must not share any of the letters in my name and must have a number in it, with a password that needed six non-consecutive numbers.
Please crawl out of my ass and leave me be, infosec.
Kid named “Sphinx of black quartz, judge all of my 1,432,765,089 vows!”:
The letters thing is horrible. That must be one of the easiest sites to hack. You’re reducing the options by a significant amount. Make sure you don’t give them any information important to you.
You’re correct, but unless they are directly targeted normally the attempts made are all from scans and those scans do not know this information so it shouldn’t matter that much.
Yeah, it’s not an issue until it’s an issue. I have no idea what company is doing this, but I wouldn’t trust them with a credit card, PII, or almost anything else. I wouldn’t put it past them to be storing the password, and anything else, in plaintext.
It’s a bank 😭
No fucking way! That’s insane. I’d create a ticket through support if I were you. That is absolutely unacceptable.
I guarantee you the person that was tasked with building the system knew this was unacceptable and was told to get on with it by laters of middle management.
Can’t get user data stolen if you don’t have users
must not share any of the letters in my name and must have a number in it, with a password that needed six non-consecutive numbers
Reminds me of the first time I applied online for an ESTA visa to visit the US: It said that I had to enter my name exactly as it is on my passport but with only the letters of the English alphabet, which is contradictory to the point of impossibility.
On a subsequent trip, I was stuck in Phoenix’ Moon Moon (officially Sky Harbor Airport) for several hours and missed my flight because the check in machine couldn’t deal with that same non-English letter and there was around a million passengers per employee to help resolve such issues 🤦🏻
Wtf, that’s pointless requirement for a username.
Also, passphrases are better than passwords
That baby aged 20 years in 2 sec
And a facebook account for three factor authentication.
The real reason that babies cry at birth.
me too little guy, me too
Who doesn’t ask for an email at signup nowadays? They’re now asking for phone numbers for 2fa.
I guess I’m in the minority when I just refuse to continue signing in.
MFA over SMS is unacceptable and is less secure than MFA over email.
Still less bullshit than trying to force people to use a monopolistic authenticator app
using Aegis myself. most things work on it.
True. But I’d still rather have a TOTP setup.
just gwt 2862378374 factor authentocation and it’s all good.
Sadly I see this happening one day, but of course it will actually be made to work just fine by being autogenerated with the birth and details provided to you the following day through the parents email. Can’t wait till a company believes this is absolutely needed and convinces politicians to be on board because hes rich and told them it will protect the children somehow.
Digital Universal Master Bio-metric Access Security Standard.
May not be used for voter identification.
As an aside, I don’t see any reason why we couldn’t have a system where the combination of someone’s name and birth year had to be unique. This would make identifying unique people a snap. Your full name and your birth year would be enough to find your file at the doctor’s office, bank, or literally anywhere else.
Even assuming people only choose to pick from the 500 top names, this allows 125 million unique combinations every year following the English trinomial naming convention. It rises to 62.5 billion combinations if one follows the tetranomial Hispanic naming convention. The issue of running out of names or duplicate names would almost never come up. And parents could just reserve a name for their child if they were so bothered.
Because you get issues with the most common last names in pretty much any language. Do you realize how many people out there have the same Last name? And does this system take into account homophones? Because if not, you didn’t actually gain any meaningful benefit out of this effort.
It would result in December babies being named 'Xyoabxoanz Smith" or similar.
Edit: just looked it up and did some napkin math. There were 2,369,644 Smiths in the USA alone in 2020. Half of them are women, and lets say about one third of them are in the age where they can have children, which leaves us with around 400k female Smiths in a childbearing age range. US fertility is at around 54 children / 1000 women / year, meaning you would have to assign around 21500 unique first names every year. This is before taking homophones to Smith into account, which will make the issue far worse. The user who said Unix Epoch would be his choice has a better system than this one could ever be.
Ok, name and unix epoch timestamp
“Hey, I just need your unix epoch timestamp real quick to find your file”
It’s only 1 more digit than a SSN. Could give everyone a barcode for convenience
It’s pronounced ‘John’
You are vastly overestimating the number of people with the same surname. Like, comically overestimating it. The 100 most common surnames only make up 15% of the US population. If anything, 500 surnames is insanely conservative. I should have said something like 2,000 surnames if I wanted to have a serious estimate.
Ehm i looked up the distribution beforehand, see my edit. These things are not distributed evenly - you have a few surnames with an insane amount in relation to any others before even coming to homophones which tilt the balance even harder towards those supercommon surnames. Smith and Brown are the ones you would have real issues if using the suggested unique name schemata.
Edit: There’s a whole another issue with this approach. If we do this on a per-country-basis, people moving into foreign countries will have to add the country of birth to everything, for example doctors appointments, for the rest of your life in case of a name collision. Making the system work worldwide will exacerbate the issue with very common surnames, because these are not only common in a single country. (Even in the DACH-area the name Schmid/Schmied/Schmidt and so on, which is simply the german form of Smith, is one of the most common surnames)
You calculated that 21,500 given names are required annually to make this work.
500 × 500 = 250,000.
i do not know what you are calculating here.
You need 21500 names for the last name “Smith” alone without any homophones messing everything up. There is no second “500”.
Edit: unless you mean forcibly reassigning last names. That will go down real smooth mate, go for it lol
Names in English typically have three components. A given name, middle name, and surname. Within any given surname, assuming people choose only to pick from the top 500 for the given names and middle names, that is 500 × 500 combinations.
However, there is in fact more variety in given names. The top 1,000 given names account for 72% of children according to the US Social Security Administration.
So there are actually at least 1 million viable combinations. Certain enough that except for all but the most common names (“John William Smith”), a person’s trinomial name is almost already going to be unique.
Ah, you are counting middle names. The one i know exactly noone actively using. I have one too! But the amount of people knowing it is around 7, and most of them will already have forgotten it.
This makes everyone’s name they have to use in basic situations increase in size by about 50%. I can’t see many people being happy about that change.
![New User [Mr Lovenstein]](https://lemmy.world/pictrs/image/025fd99f-a2c4-4275-b8f4-593f47094a75.png){kind=link}