Hacker News Reader

Or why not scrap the password and the username and just use passwordless login.

yep, I was thinking the same. User informs email. System sends a code. User uses the code and log in. No password. Transparent validation.