this post was submitted on 21 Oct 2025
690 points (97.5% liked)

memes

18078 readers
1061 users here now

Community rules

1. Be civilNo trolling, bigotry or other insulting / annoying behaviour

2. No politicsThis is non-politics community. For political memes please go to !politicalmemes@lemmy.world

3. No recent repostsCheck for reposts when posting a meme, you can only repost after 1 month

4. No botsNo bots without the express approval of the mods or the admins

5. No Spam/Ads/AI SlopNo advertisements or spam. This is an instance rule and the only way to live. We also consider AI slop to be spam in this community and is subject to removal.

A collection of some classic Lemmy memes for your enjoyment

Sister communities

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] MyTurtleSwimsUpsideDown@fedia.io 77 points 1 month ago (1 children)

It rejects the first [correct] login attempt (it’s worded poorly). It assumes that a brute force attacker will try any given password once and move on, while a human user will think they made a typo and try again. This works until the attacker realizes that it takes two attempts, in which case it merely doubles the attempts required to breach the account, and simply requiring an additional password character would be vastly more effective.

[–] snooggums@piefed.world 38 points 1 month ago (5 children)

What a shitty user experience for regular users.

[–] dreadbeef@lemmy.dbzer0.com 93 points 1 month ago (1 children)

which is why they made a comic instead of a revolutionary thought leading blog post

[–] taiyang@lemmy.world 14 points 1 month ago

Hey now, I'm sure there's someone on LinkedIn suggesting this exact thing with layers of corporate speak.

[–] MyTurtleSwimsUpsideDown@fedia.io 15 points 1 month ago

Agreed, and also makes it readily known that that is what you are doing.

The sneakier more user friendly way to implement it would be to require the second correct attempt only if the user has made an incorrect attempt since the last successful login.

[–] ICastFist@programming.dev 15 points 1 month ago

Just like captcha

[–] petersr@lemmy.world 4 points 1 month ago

Look, we all need to pay a little for the greater good of security.

/s

[–] Smoogs@lemmy.world 4 points 1 month ago

Yup it’s like how software companies will get a hate on for pirates and take it out on their loyal paying cutosmers