|
Re^3: login with google account
by jdporter (Paladin) on Oct 11, 2024 at 15:48 UTC
|
- Will it encourage more people to use the Monastery?
Bingo. We have lost a lot of users, including very valuable, high-level Perl experts, because of our abysmal security posture. Fixing it is actually our #1 priority. I just haven't done it because it's extremely complicated and I don't know how to do it.
Today's latest and greatest software contains tomorrow's zero day exploits .
| [reply] |
|
|
I've implemented web systems with hash&salt/bcrypt password systems.
I'm pretty sure i could find a way to do it in the PM codebase. But that would require giving me access to an "offline" dev copy with complete code and database access to do many test runs, prefereably a recent database dump with all the passwords reset to random strings. So this is rather unlikely to ever happen.
In my opinion, a LOT of the dev backlog on PerlMonks stems from the fact that the ONLY system to develop new features is the live system...
| [reply] |
|
|
| [reply] |
|
|
| [reply] |
|
|
|
|
|
|
|
|
|
|
|
|
Re^3: login with google account
by Arunbear (Prior) on Oct 12, 2024 at 12:26 UTC
|
How do you know that Google logins fail on the third point? I can imagine a new way to login would encourage people to join - there'd be less impedance if they already have a Google login.
And why do you think any Monastery change whatsoever would make a difference as far as the first two points go? Surely those are more down to Perl's own feature's vs other languages?
| [reply] |
|
|
How do you know that Google logins fail on the third point?
On the balance of probabilities, adding a new way for people to sign into a site that they can already sign into, isn't going to make more people sign in...it will only give existing users a different way to sign in.
And why do you think any Monastery change whatsoever would make a difference as far as the first two points go? Surely those are more down to Perl's own feature's vs other languages?
Not at all!
The appeal of a language is not just the features of the language itself. There is the perception of "relevance", "employability" and what my generation would have called "coolness".
More recent languages have slicker, more user-friendly forums and support sites.
Perl Monks is a part of the Perl infrastructure whether we like it or not. I don't believe it portrays Perl as a relevant or cool language...
| [reply] |
|
|
More recent languages have slicker, more user-friendly forums and support sites.
Slickness and user-friendliness are in the eye of the user. I have not, to my recollection, used a slicker forum than this. It is much, much faster and easier to use than the vast majority of other user fora I inhabit. It is easily user-customisable and user-extensible. I can use it in any browser of my choice and with JavaScript fully disabled if I so choose. It doesn't have pop-ups obscuring the content for any reason (cookies, subscriptions, other legal notices, etc.), it doesn't have inactivity timeouts, doesn't force its choice of font or style or anything on me.
Don't go chasing new blood with "shiny". The old blood might just up sticks for pastures new instead.
| [reply] |
|
|
|
|
|
|
|
adding a new way for people to sign into a site that they can already sign into ...
There's a much larger group of people who can't already sign in, i.e. those with Google accounts who don't have a PM account. Now imagine they could just use their Google login here - would that not make it more inviting for them to do so?
More recent languages have slicker, more user-friendly forums and support sites.
I'd agree that's part of the solution, but sadly I doubt it'd be enough (to change perceptions). Being more recent already gives them a significant head start in looking more relevant/cool, and on top of that, these languages tend to be more actively developed as well.
| [reply] |