Hacker News new | ask | show | jobs
by madamelic 1348 days ago
Service-unique email / username + service-unique credit card is good enough for, I'd estimate, 95% of people.

You are trying to avoid wholesale scoops of info and automated credential stuffing. If your threat model is people specifically seeking out and targeting you: godspeed.