1,675 karma · joined March 1, 2013
"The HOTP value must be at least a 6-digit value. It is also desirable that the HOTP value be 'numeric only' so that it can be easily entered on restricted devices such as phones."
6 was defaulted to in the TOTP for being 'secure enough' and easy enough for most people to remember.
As more and more is shared, I've seen my kids not want to try things simply because they see people doing the same thing amazingly well. The same people doing things so amazingly well don't necessarily share all the work and failures that went into getting there which is a shame and probably a better lesson then the end result.
I've been using C# and looking up how to handle DI and have been trying to piece together things from old articles and SO posts that I have no idea hold true today or not. Why they simply can't provide up to date best practices for various scenarios is beyond frustrating. I guess they're big enough they don't need to care that much.
However you can also find small/medium companies that understand that they need to ship, but also understand how to properly run things. There is a much greater chance of that happening at a small/medium company than any big company.
Then only to see a month or whatever later a similar idea posted to HN with them saying how they have customers and inflow. Could I have done the same? Maybe. Was it just because they could market well? Maybe. Will I ever really know? No. Cause I never tried. Will I ever learn my lesson? I can only hope.
I just wonder how well it works in supporting them vs asking for money from their customers to support a decent/private browser stack.