Web devs: what's up with this trend? For enterprise apps, I get it…single sign-on needs to detect what your email domain is to send you to your identity provider. For consumers, I feel like it's gotta be one of these reasons:

• Users don't know about the tab key being able to move to other fields on a page
• Mobile users don't really have a tab key, despite there being "previous/next field" arrows on the stock iOS keyboard since its inception (Android users, help me out please)
• Users tend to hit Enter after typing in their username, leading to a form submission with a blank password
• Security, maybe? In the past I have sent a link and a password in separate emails or separate communication methods entirely. Are you hashing/salting these separately for better MITM mitigation?

Did your UX team make a decision? Are my password managers forever doomed to need a "keyboard combo" value for every entry from now on?

Non-devs: do you prefer one method over the other? If so, why?

Tildes maintainers: selfishly, thanks for keeping these together :)

This is kind of silly. I've been tild'ing a lot recently and have come to recognize some other users, and am wondering how accurate my simple reactions are, or whether they're shared by anyone else.

• deimos - Moon of Mars, and also a character in either one of the early Unreal Tournament games or Quake 3 Arena. Uh, also a figure from Greek or Roman mythology or whatever 😅
• cfabbro - "C fab bro" - Identifies as a "bro", and does something involving fabrication?
• douchebag - Expects to get hated on maybe?
• akir - For some reason makes me think of Admiral Akbar from OG Star Wars.
• algernon_asimov - Has been explained. I too love Flowers for Algernon and Isaac Asmiov.
• boxer_dogs_dance - I picture three dogs on their hind legs "holding" each other's forepaws, merrily dancing in a circle. It makes me happy 😅

Sorry if I've forgotten your username! Reply and I'll tell you what yours makes me think, I'm feeling associative.

I always try this name first when signing up for accounts but it is always taken.

Listen closely, my friend, because I'm about to blow your mind wide open. You see, 'King of the Hill' isn't just some ordinary animated series. It's a diabolical government project aimed at documenting every aspect of my life! They've been watching me, tracking my every move, and mocking me through the fictional character of Hank Hill. It's all a clever ruse to hide the truth from the masses!

In every episode, they carefully weave in details from my life, the people I know, and the secrets I've uncovered. The creators are agents of the government, skillfully disguising their surveillance operation as a simple sitcom. They want the world to think it's just entertainment, but it's so much more!

Think about it! The show portrays Hank as a patriotic, average American, while I, Dale-ahem uh, Rusty Shackleford, the one who truly understands what's going on, am portrayed as a paranoid conspiracy theorist. It's a calculated move to discredit me, to make the truth sound like fiction!

Every time I see the show, I feel their eyes upon me, laughing at my expense. The characters, the scenarios, they're all just tools to manipulate public perception. It's a mind-control experiment! MAKE SURE YOUR MOUNTAIN DEW IS SAFE.

But don't worry, my friend. I won't let them silence me. I'll continue to expose the truth, fighting against this government conspiracy, no matter how deep it goes. They can't hide forever!

Sha-sha-shaaaaa! pocket sand

I tried to register here the other day with my preferred username, which was taken, so I replaced an S with a 5 as I've done in the past. Now I realize that might have been a bit deceptive - someone reading my comment might think it's coming from the other user or vice-versa, and I don't want to be that guy. What's the vibe here about that? Should I invite myself under a new name once I'm approved for invitations, or keep this username? I'd just DM the other user if that was an option on tildes.

edit: Thanks, all! I'll keep it until/unless the other user feels strongly about it.

Further questions:

• If you go by both, do you ever mix them or do you keep them totally separate?
• Do you let your real life friends, family and peers know about your online pseudonyms?
• For people building an online presence as a kind of brand, how does this impact your choice?

lou's post here resonated with me and my attempts to get my family to use better security practices (i.e. 2FA, password managers). They're very difficult to wrap your brain around to the average user, and they have the ability to create catastrophic failstates if used incorrectly. Furthermore, even when they work well, they can still be kind of clunky (different sites use different methods; writing down/printing recovery codes feels like a dated solution alongside other tech-forward things).

Also, outside of this, password requirements are their own bugbear, with nearly every site having different criteria. Even as someone who uses a password generator and manager on the regular, I still have to adjust the password creation criteria to do things like fit character limits or specific requirements (and don't get me started on forced resets!). I totally get why so many people reuse passwords, or have a default one that they sort of modify as needed to fit a given site's needs.

From my (admittedly super limited) perspective of a lay user: usernames, passwords, 2FA and the whole stack seems like something that's suffering under the technical debt of decades' worth of web development and networking. It seems like things have inched forward and many new layers have been added to address emergent problems, but the whole system gives a sort of barely-held-together-by-tape feel.

What if we could use what we know now and redesign things from the ground up? If we could start fresh, today, what might username authentication look like beyond the usual username/password combos that we're so used to?

I'm interested in any ideas -- not necessarily just feasible ones.

Also, despite me being the one prompting this thread, don't feel the need to simplify technical explanations or anything. I'm mostly interested in lurking and seeing what all you very smart techy people have to say about the topic. :)

In text posts, like this one,, we can see the name of user who created it. But if it is a link post then it shows site name in it's place. To see who created that post we have to open the comments page. Site name can be moved to article details line where the date of publishing and word count is. That way both info can be shown.

Reason. Both information is shown at same place currently 1. which can confuse new users. for example. Notice after four times mentioning site name there is a username. 2. both can't be shown together.

Since the website has a username and hundreds we were presented with an opportunity to pick a really nice or cool username on a site that I believe will rival reddit.

I just picked my favourite character. I wanted to pick my first name (which I am 100% sure is not taken) but kind of decided to go towards more anonymity. I decided not to use my reddit username because no one else literally uses it so I will always have an option to make a new account with reddit username

Did you think on that too or just used your reddit username?

EDIT: I have actually changed my username from "ironman" to "metal" since i made this post. Now im like super happy and excited about my "identity" here

So one of the things I really liked about the project is point 1 of the privacy section of the Mechanics (Future).

Proactive not reactive; preventative not remedial: When creating new features, think about what data will need to be stored, and consider how harmful it might be if that data was to be leaked in the future. Is it possible to reduce the amount of data being stored to lower the potential harm? Can the data eventually be aggregated or anonymized so that we're only storing recent data instead of a full history?

I think a good first step would be to not have a public comment/submission history. Users should evaluate other users contributions based on the conversation the are having/reading, not past submissions.

This doesn't make you anonymous, but at least it can prevent nosy people from knowing too much. (I get there are valid reasons to want to find other posts by the same user, but I think individual privacy is more important). At least, if not enforced for everyone, this should be an option, making your profile not display your history to others.

Now, one of my biggest problems with reddit is that it doesn't make it easy for you to stay anonymous and also keep your content on the site.

Let me explain. I don't like people being able to see my submission/comment history, because I don't want to give the chance for people to identify me if I don't choose to do so personally. It's not about reddit knowing what I like or do (I mean, I use Google, they know everything I do), it's about individuals, about other users knowing things I'm not happy sharing with them for whatever reason.

There are only two options on reddit: deleting my content (using a script or whatever or going one by one) or deleting my account. This results in me deleting all my comments and submissions on reddit every few weeks.

Now, I would love to be able to leave most of what I post on reddit online, because sometimes I have really interesting conversations and I try to be detailed and clear and other people might find (some of) my posts useful. But I don't want anyone who knows my username or anyone who sees a comment of mine going through my history. There's too many crazy people. Also, I haven't suffered doxxing, but that's just not nice.

There are many reasons why someone could prefer to not be identifiable. Just to give some examples that come to mind: people might have an ideology that other users don't like/respect, people might post pictures of themselves (think fitness groups, for example), people might post in local groups revealing their location, people might look for counsel and talk about their personal problems, etc. Putting all of that together might make it easy to identify someone.

So, what I would like to propose is a way to leave my content online if I wish to and giving other people the option to read it in the future, without it being publicly tied to my username.

How could this be done? Well, I think users should be able to anonymize their participation in a thread individually and throughout the site. There could be an button (on every thread for thread only anonymization and on your profile for full site anonymization) that you tap and your username is replaced all through each thread with a randomly generated username (it'd be great if the username is consistent within the thread, so people reading would know its the same person).

These usernames should be words, ideally, not difficult to parse by humans. Of course this would generate a great number of usernames, but there are some solutions.

One could be using something like Google Docs uses when several anonymous viewers are watching a document. Each gets a name (RedFox, whatever) which is consistently used throughout the thread. The same username (RedFox) can then be reused in another thread for any other anonymous user. (So RedFox wouldn't be referring to the same person in different threads, but to two random, anonymized persons).

I'm sure it wouldn't be difficult to generate these (similarly to how reddit gives you suggestions to new usernames when you open an account).

Also, in order to avoid the admins having to reserve many usernames in advance, these usernames could have a special mark (like *RedFox or °RedFox, or ~RedFox~, for example). This way, a new user can register any available name without interfering with these anonymous usernames. A thread could have some non-anonymized user called RedFox and an anonymized user called °RedFox (or whatever mark is used).

In any case, the user should be able to access all of their submissions and comments on their profile even after anonymizing, being able to edit or delete them if they wish to.

Ok, I think that's it, I hope I was clear. I'm also not gonna be able to log in again until tomorrow. So please, go ahead and discuss and tell me what you think and I'll come back when I can.

EDIT: User karma should not be public either. I can make an argument for it tomorrow if needed or we can discus it on another thread.