www.sixfingeredman.net
..................................................
::. .  .   .     .       .          .

the humane interface

Raskin argues that we should be using only a password instead of a username and password. Why don't we?

Well there are two modes of attack we must prevent -- trying it access a specific account, or trying to access any account. With Raskin's dictionary-based passwords, the latter becomes trivial. Simply trying every possible password is bound to net you some valid one quickly, even in a large search space.

On the other hand, what if we use only partly-generated passwords. Allow the user to choose one word, and the computer chooses two others to ensure uniqueness. You'd have a long password, but it would be as secure as username+password. That's because the user-chosen part is equivalent in function to a username. Instead of typing it in a separate box, you concatenate it to your password.

But this system still misses the real advantage of username+password. Passwords need to change often, but identities never change. So, if you only log in with your password, you still need a separate ID somewhere so that you can change your password without changing your identity. This ID may as well be your username.

Principles:

Everything operates directly on the content by default. Meta-operators are done with a quasimode when practical.

Quasimodes are done with a meta key combined with a mode key. Modes can be nested, but not exited individually.

Keypresses are quasimodes. When you press the key, the results are shown. When you release, they are confirmed. Pressing escape while the key is held cancels the keypress and allows you to release without effect. Ex: copy key.

The regions are always there, but usually invisible until you issue a region command.

Region-show command is sticky, in that it persists until the next keypress?

Modes come in three forms: quasimodes, where you hold down a key to stay in the mode. Short modes, where they last for exactly one cognitive unit and then end automatically, i.e. quote-mode which quotes the next key combination. And semi-permanent modes, which are forms. Although I'm hoping forms can be seen as a view of content.