Why would a website which authenticate with a UserID and password put only the UserID on the sign on screen?

Why would a website which authenticate with a UserID and password put only the UserID on the sign on screen... for security purposes, then on the next screen ask for a password. How is this more secure? Example:https://ezcardinfo.com/ Asked by dwdrums 16 months ago Similar questions: website authenticate UserID password put sign screen Computers > Software Development.

Similar questions: website authenticate UserID password put sign screen.

1 This wouldn't make a bit of difference as long as the password was encrypted and or masked while you enter the password. We all have our own methods of creating and the programmer did it this way. He may have a reason for it from his code for better control.

This user has been banned from Askville.

1 This wouldn't make a bit of difference as long as the password was encrypted and or masked while you enter the password. We all have our own methods of creating and the programmer did it this way. He may have a reason for it from his code for better control.

This wouldn't make a bit of difference as long as the password was encrypted and or masked while you enter the password. We all have our own methods of creating and the programmer did it this way. He may have a reason for it from his code for better control.

2 Well, I can't be too sure, but it looks to be an older Website. I would say the log in is probably less sophisticated than it would be for a fancy new Website. It might be slightly less secure, because once a hacker finds an ID that lets him in, he can just concentrate on finding a password to get him in further.

But to tell you the truth, most hackers take the easy approach and capture your IDs and passwords by getting you to install a piece of malware by clicking on a pop-up box. They probably won't waste their time trying to do a brute force break in on this site.

Well, I can't be too sure, but it looks to be an older Website. I would say the log in is probably less sophisticated than it would be for a fancy new Website. It might be slightly less secure, because once a hacker finds an ID that lets him in, he can just concentrate on finding a password to get him in further.

But to tell you the truth, most hackers take the easy approach and capture your IDs and passwords by getting you to install a piece of malware by clicking on a pop-up box. They probably won't waste their time trying to do a brute force break in on this site.

3 There are also routines out there that will go through an account and find the password for you. This user has been banned from Askville.

3 There are also routines out there that will go through an account and find the password for you.

There are also routines out there that will go through an account and find the password for you.

4 My initial thought was that by separating the userID and the password (Charterone/Citizens bank also does this btw), you may be lessoning a hacker's ability to enter commands to query or update tables in a database from the web form. Not that secured sites don't code or design against this activity, but I've heard of vulnerabilities where hackers enter SQL or other commands right into the UserID and password fields, to get replies with secure data from tables.

My initial thought was that by separating the userID and the password (Charterone/Citizens bank also does this btw), you may be lessoning a hacker's ability to enter commands to query or update tables in a database from the web form. Not that secured sites don't code or design against this activity, but I've heard of vulnerabilities where hackers enter SQL or other commands right into the UserID and password fields, to get replies with secure data from tables.

5 It is very slightly less secure if accepting the user ID confirms the existence of that user ID. The user ID is not supposed to be a secret, but having to guess it adds a small amount of time to the test-retry cycle. If the screen will accept invalid user IDs, then it's simply poor and inconvenient design.It also adds a bit of extra code state to the system, an extra opportunity for programming mistakes to be turned into hacks.

So it's a bad idea, with only a trivial upside and large downsides.

It is very slightly less secure if accepting the user ID confirms the existence of that user ID. The user ID is not supposed to be a secret, but having to guess it adds a small amount of time to the test-retry cycle. If the screen will accept invalid user IDs, then it's simply poor and inconvenient design.It also adds a bit of extra code state to the system, an extra opportunity for programming mistakes to be turned into hacks.

So it's a bad idea, with only a trivial upside and large downsides.

Want a venture capitalist to invest on website / software development.

I cant really gove you an answer,but what I can give you is a way to a solution, that is you have to find the anglde that you relate to or peaks your interest. A good paper is one that people get drawn into because it reaches them ln some way.As for me WW11 to me, I think of the holocaust and the effect it had on the survivors, their families and those who stood by and did nothing until it was too late.

Related Questions