Hacker News new | ask | show | jobs
by adrianwaj 1 day ago
anonymous twin - if you're ever hacked, make sure the attacker can't identify users. Don't ask for emails or phone numbers. Provide users with 10 login strings that must be used sequentially. To login, use #1 string first + PIN and as soon as #2 string + PIN is used, #1 is automatically cancelled. They are not one-time logins. Can be used repeatedly.

Have an emergency passcode to be used for a new set of 10 after a fortnight time delay that neutralizes the previous 10. I am just making this up - I don't even know if any of this is truly necessary.