At the moment you do not need to enter your current password in order to set a new one.
This has the undoubted merit that it is quick and simple to do.
However, many people will tick the "remember password" box, or leave BBO on, even in public areas (I know this from Malmo). Which means that some looney could easily log on and lock the other user out.
It is normal in the field of computers to have to enter your old password as a safeguard. Perhaps BBO should implement this as a pre-emptive strike?
Page 1 of 1
Change Password Can it be more secure
#2
Posted 2004-July-22, 15:37
I think it is best left to individual to take responsibility of their ID. I hope I speak for many like me who're too lazy to keep entering passwords. That's what "Remember password" option is for.
=Ş
=Ş
"More and more these days I find myself pondering how to reconcile my net income with my gross habits."
John Nelson.
John Nelson.
#3
Posted 2004-July-23, 01:36
The "remember password" feature is no problem. I somebody uses my computer, he can login with my name, but thats it - he still does not know my password and therefore cannot do it again when he has left. But he can use the edit profile dialog to change the password, and then I cannot login with my name anymore without any clue what happened.
So not the "remember password" feature needs to be changed, but the 2 password fields in the edit profile dialog should be replaced by a button "Change Password", invoking a dialog that requires the user to type in the old password once and the new one twice. But I would not regard this as an urgent improvement.
Karl
So not the "remember password" feature needs to be changed, but the 2 password fields in the edit profile dialog should be replaced by a button "Change Password", invoking a dialog that requires the user to type in the old password once and the new one twice. But I would not regard this as an urgent improvement.
Karl
Page 1 of 1

Help
