this post was submitted on 05 Apr 2024
1109 points (98.9% liked)
Programmer Humor
32291 readers
32 users here now
Post funny things about programming here! (Or just rant about your favourite programming language.)
Rules:
- Posts must be relevant to programming, programmers, or computer science.
- No NSFW content.
- Jokes must be in good taste. No hate speech, bigotry, etc.
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Hmh, I guess, though I feel this is a bit more complicated. What if you can look up the username in the registration mail sent to the inbox? Or it's a site that uses email addresses as usernames? Is it knowing if said knowledge is inferrable from the thing you have?
I think you got it wrong what i meant (?)
Imagine i register on a website with my username ( DacoTaco ) and email ( [email protected] ). When i want to reset my password and click the "forgot password" link, it would ask my username, not my email address (something i know) and send me an email ( to [email protected] ) without reporting what email it sent it too. That way it could be considered a separate identity factor i think (access to the mailbox, something you have ).
Websites generally dont work this way, i know. But thats how id implement it :')
Thanks for clarifying. I was mostly trying to apply that scenario to a likely real world one, but there's definitely cases in which it could be two factor.