Hacker News Reader

I wonder why we have username/password. It seems to me, if you have a properly randomized password then you only need that. It's completely identifying. Copy your 256-bit key in from your password vault and voila.

Usernames are pretty lame anyway. They're just a 'guess a cute name nobody else used yet' game.

View on HN

How would you address other users? Using SHA of the password?

You can say what is suggested is similar to tripcodes used in some imageboards. If you put `User##password` (where `User` is optional) in the name field when you post something your name will be displayed (differs in each site) like `User!!rEkSWzi2+mz`. So your "account" is the password, no username is needed, and you can have a nickname if you want.

Folks could/should have as many contact aliases as they desire. They can send them securely to others whom they want contact with. A single username per customer is a lame approximation to what humans really want/need.

Further, it's not necessary to be a unique name - there are plenty of Joe's in the world already. It's not ambiguous if you're contacting the Joe you know.

In any case the username is unnecessary when authenticating. Why not prompt for address, or mother's maiden name too? It's all the same sort of weak 'authentication' that could be eliminated with a proper password/access key.

Reply on news.ycombinator.com