Hacker News Reader

gohohnon “Invalid Username or Password”: a useless security measure (2014)

That is true. But then many people put a lot of trust in the major providers in many other areas too, such as hosting their private files and email, holding card payment information, and so on.

gohohnon “Invalid Username or Password”: a useless security measure (2014)

The only extra information you would be volunteering is that you signed in to a specific website. In most cases, this is not really a big deal.

gohohnon “Invalid Username or Password”: a useless security measure (2014)

The only information they would receive is that you signed in to a specific website.

gohohnon “Invalid Username or Password”: a useless security measure (2014)

Another method is to delegate the registration and login flow to external providers, using OAuth.

If you have to log in to a website via one of Microsoft, Google, Facebook, Twitter, etc. then, if implemented properly, there's no way of knowing if an account associated with this external identity exists already.

gohohnon A history of ARM, part 2: Everything starts to come together

It's a reference to silicon, the element with atomic number 14. Makes sense that it would be used by more than one company.