It looks like you got ChatGPT to write shorter sentences than usual but it this article has the structural signs of something it wrote -- it circles around and repeats itself way too much.
As for time sensitivity I'm going to say the sense of urgency is a bug and not a feature. I think sending people urgent methods about the security of their account is fundamentally bad because it trains people to apply system I thinking to security -- i mean phishing messages are often about some urgent thing having to do with security. If one could say WE ARE NEVER GOING TO SEND YOU MESSAGES ABOUT THE SECURITY OF YOUR ACCOUNT and users believed it I think those users would be more secure.
In that frame, a 45 sec timeout for an OTP is too short and that timeout should be increased even if it means increasing the entropy.
The case for speed is just... speed is good, full stop. If a response of any kind is delayed for 45 sec the user is going to think that it might never be coming and will be likely to retry, give up, kill -9, reboot the device, etc... Whatever it is.
Bridgexapi•2h ago
PaulHoule•1h ago
As for time sensitivity I'm going to say the sense of urgency is a bug and not a feature. I think sending people urgent methods about the security of their account is fundamentally bad because it trains people to apply system I thinking to security -- i mean phishing messages are often about some urgent thing having to do with security. If one could say WE ARE NEVER GOING TO SEND YOU MESSAGES ABOUT THE SECURITY OF YOUR ACCOUNT and users believed it I think those users would be more secure.
In that frame, a 45 sec timeout for an OTP is too short and that timeout should be increased even if it means increasing the entropy.
The case for speed is just... speed is good, full stop. If a response of any kind is delayed for 45 sec the user is going to think that it might never be coming and will be likely to retry, give up, kill -9, reboot the device, etc... Whatever it is.