Comments on: “Forget” your password? http://freepressblog.org/2006/06/07/forget-your-password/ A few thoughts and other random stuff I found interesting. Tue, 09 Mar 2010 18:29:31 -0800 http://wordpress.org/?v=abc hourly 1 By: JB http://freepressblog.org/2006/06/07/forget-your-password/comment-page-1/#comment-4525 JB Sat, 10 Jun 2006 17:42:03 +0000 http://freepressblog.org/blog/2006/06/07/forget-your-password/#comment-4525 Yes, I'm with you on that; the decision was probably made by the tech guys and they probably did tell the management that people must register in order to view the content. However, as an external observer, I'll take any action (or inaction) that an employee of that company makes as done on behalf of that company as an entity, and their internal communication issues are their own problems, so I still feel OK about it. At least that's what I'll keep telling myself. :) BTW, you wouldn't want to anonymously play bottle cap games would you, because what if you win? Yes, I’m with you on that; the decision was probably made by the tech guys and they probably did tell the management that people must register in order to view the content. However, as an external observer, I’ll take any action (or inaction) that an employee of that company makes as done on behalf of that company as an entity, and their internal communication issues are their own problems, so I still feel OK about it. At least that’s what I’ll keep telling myself. :)

BTW, you wouldn’t want to anonymously play bottle cap games would you, because what if you win?

]]> By: nstryker http://freepressblog.org/2006/06/07/forget-your-password/comment-page-1/#comment-4526 nstryker Sat, 10 Jun 2006 15:32:35 +0000 http://freepressblog.org/blog/2006/06/07/forget-your-password/#comment-4526 good points, although i think (just knowing the way businesses work and the way i've seen lots of tech staff withhold information from stakeholders simply because they don't want to go to extra trouble) this decision was made by whoever configured the site. if an executive were informed that someone could spoof google and bypass registration, they'd put a stop to it. i guess i'm just mad because i can't spoof google to play bottle cap games. :-) good points, although i think (just knowing the way businesses work and the way i’ve seen lots of tech staff withhold information from stakeholders simply because they don’t want to go to extra trouble) this decision was made by whoever configured the site. if an executive were informed that someone could spoof google and bypass registration, they’d put a stop to it.

i guess i’m just mad because i can’t spoof google to play bottle cap games. :-)

]]> By: JB http://freepressblog.org/2006/06/07/forget-your-password/comment-page-1/#comment-4528 JB Sat, 10 Jun 2006 06:59:34 +0000 http://freepressblog.org/blog/2006/06/07/forget-your-password/#comment-4528 No, those situations are completely different. One huge difference (ethics aside) is that minors buying alchohol and cigs with fake IDs is <em>illegal</em>, both for the minor buying them AND for the shopkeeper selling them. In addition, there are many other obvious ethical issues with the scenario you presented, whereas I don't see anyone being harmed at all by going to web sites without registering. I never said that right and wrong were determined by enforcement, I was just pointing out that in this specific instance, where prevention is a very simple matter of configuration, someone somewhere along the line at those companies has decided that they don't really care that much about forcing people to register to read their content. As for this particular situation, I see this as no ethically different than someone "beating the system" by taping (or DVRing) their TV shows and fast forwarding through the commercials. Since I'm pretty sure you do this, do you feel guilty about violating some sort of implied contract that accompanies your viewing of those broadcasts? No, those situations are completely different. One huge difference (ethics aside) is that minors buying alchohol and cigs with fake IDs is illegal, both for the minor buying them AND for the shopkeeper selling them.

In addition, there are many other obvious ethical issues with the scenario you presented, whereas I don’t see anyone being harmed at all by going to web sites without registering.

I never said that right and wrong were determined by enforcement, I was just pointing out that in this specific instance, where prevention is a very simple matter of configuration, someone somewhere along the line at those companies has decided that they don’t really care that much about forcing people to register to read their content.

As for this particular situation, I see this as no ethically different than someone “beating the system” by taping (or DVRing) their TV shows and fast forwarding through the commercials. Since I’m pretty sure you do this, do you feel guilty about violating some sort of implied contract that accompanies your viewing of those broadcasts?

]]> By: nstryker http://freepressblog.org/2006/06/07/forget-your-password/comment-page-1/#comment-4527 nstryker Sat, 10 Jun 2006 06:06:58 +0000 http://freepressblog.org/blog/2006/06/07/forget-your-password/#comment-4527 so you're okay with minors buying alcohol and cigarettes with fake ids? i know you said it's not a blanket rule, but that seems like the same scenario to me. so few do it that it's not worth law enforcement's time to prevent every single instance. right and wrong are not determined by enforcement. so you’re okay with minors buying alcohol and cigarettes with fake ids? i know you said it’s not a blanket rule, but that seems like the same scenario to me. so few do it that it’s not worth law enforcement’s time to prevent every single instance.

right and wrong are not determined by enforcement.

]]> By: JB http://freepressblog.org/2006/06/07/forget-your-password/comment-page-1/#comment-4529 JB Fri, 09 Jun 2006 22:24:28 +0000 http://freepressblog.org/blog/2006/06/07/forget-your-password/#comment-4529 As it relates strictly to this specific issue, yes - not a blanket rule. Every situation is different. They made the conscious decision to allow page requests containing certain user agent descriptions to bypass their registration process, while at the same time they know (or should know) that people can easily specify any user agent string they want to. So, in my opinion, they are OK with this, which is probably fairly accurate (as opposed to being my own convoluted justification for doing it). They probably do know that this workaround exists, and probably also know that few will do it, so they don't really care. As it relates strictly to this specific issue, yes – not a blanket rule. Every situation is different.

They made the conscious decision to allow page requests containing certain user agent descriptions to bypass their registration process, while at the same time they know (or should know) that people can easily specify any user agent string they want to.

So, in my opinion, they are OK with this, which is probably fairly accurate (as opposed to being my own convoluted justification for doing it). They probably do know that this workaround exists, and probably also know that few will do it, so they don’t really care.

]]> By: nstryker http://freepressblog.org/2006/06/07/forget-your-password/comment-page-1/#comment-4530 nstryker Fri, 09 Jun 2006 22:00:16 +0000 http://freepressblog.org/blog/2006/06/07/forget-your-password/#comment-4530 ah, the old "it's ethical if they fail to prevent me from doing it" argument... ah, the old “it’s ethical if they fail to prevent me from doing it” argument…

]]> By: JB http://freepressblog.org/2006/06/07/forget-your-password/comment-page-1/#comment-4532 JB Fri, 09 Jun 2006 17:31:45 +0000 http://freepressblog.org/blog/2006/06/07/forget-your-password/#comment-4532 I don't know how I missed it before, but I didn't catch Nate's comment earlier. As for playing by their "rules", I see your point, but at the same time you could argue that they can't have it both ways. For the sites on which this trick works (specifically some newspaper ones), they have made the decision to configure their sites this way, so in effect they are allowing it by their policy. They always have the option of not allowing Google to index their site, or going through some extra measures to allow the Google bot (or other search engines) that don't involve only the user agent description. Whether they choose not to do this consciously or just out of lack of knowledge is unclear (and probably differs from site to site), but either way, I'll take it as an open invitation, since there are means they can take to "fix" it if they so desired. I don’t know how I missed it before, but I didn’t catch Nate’s comment earlier. As for playing by their “rules”, I see your point, but at the same time you could argue that they can’t have it both ways.

For the sites on which this trick works (specifically some newspaper ones), they have made the decision to configure their sites this way, so in effect they are allowing it by their policy. They always have the option of not allowing Google to index their site, or going through some extra measures to allow the Google bot (or other search engines) that don’t involve only the user agent description.

Whether they choose not to do this consciously or just out of lack of knowledge is unclear (and probably differs from site to site), but either way, I’ll take it as an open invitation, since there are means they can take to “fix” it if they so desired.

]]> By: JB http://freepressblog.org/2006/06/07/forget-your-password/comment-page-1/#comment-4533 JB Fri, 09 Jun 2006 05:22:08 +0000 http://freepressblog.org/blog/2006/06/07/forget-your-password/#comment-4533 Yeah, I saw that in your feed earlier. I was almost going to set up a digg account just so I could respond to the first comment, but the next commenter already said pretty much what I was going to say: this trick won't work everywhere, but it does come in handy for those sites that fit the profile I described (they want their site indexed but also want to require registration). BTW, (and kind of on topic for this post) I think it sucks that you have to register to comment on digg. Yeah, I saw that in your feed earlier.

I was almost going to set up a digg account just so I could respond to the first comment, but the next commenter already said pretty much what I was going to say: this trick won’t work everywhere, but it does come in handy for those sites that fit the profile I described (they want their site indexed but also want to require registration).

BTW, (and kind of on topic for this post) I think it sucks that you have to register to comment on digg.

]]> By: Dan http://freepressblog.org/2006/06/07/forget-your-password/comment-page-1/#comment-4531 Dan Fri, 09 Jun 2006 01:52:07 +0000 http://freepressblog.org/blog/2006/06/07/forget-your-password/#comment-4531 [<a href="http://digg.com/technology/Forget_those_passwords._Be_Google_instead.">Link</a>] HA HA, I posted you on Digg [Link]

HA HA, I posted you on Digg

]]> By: Trent the Thief http://freepressblog.org/2006/06/07/forget-your-password/comment-page-1/#comment-4534 Trent the Thief Thu, 08 Jun 2006 11:47:10 +0000 http://freepressblog.org/blog/2006/06/07/forget-your-password/#comment-4534 Excellent. Excellent.

]]>