Comment by TeMPOraL
7 days ago
> But users can and do override this decision.
Yes. That is a feature, not a bug.
Transferability and delegation of authority are features. Calling them "phishing vectors" only makes them seem like a bug.
7 days ago
> But users can and do override this decision.
Yes. That is a feature, not a bug.
Transferability and delegation of authority are features. Calling them "phishing vectors" only makes them seem like a bug.
Being able to enter my Hulu password on disneyplus.com is a feature, being able to enter my Bank of America password on bank0famerica.com is a bug. The problem is that the same behavior causes both.
I'll raise you a better one:
Being able to give your Hulu or Bank of America password to your spouse is a feature, but giving it to a scammer is a bug.
Can't have one without the other, but I disagree making credentials non-transferrable is the right choice.