blog.sturdystatistics.com/posts/api_keys

why not just... not store passwords

it’s just another db

what’s wrong with oauth

oof

nah just use oauth

yeah that’s a thing now

like it cracks passwords instantly

wait what

then we’re all quantum screwed

okay but what if the db is quantum

then you’re locked out if you sneeze

what about biometrics

too expensive

what about hardware tokens

literally

db auth is like leaving keys in the door

ugh fine but still

no it’s called defense in depth

that’s just paranoia

like a fake db to catch hackers

what if it’s a honey pot

idk man...

nah just reset passwords

then we’re all screwed

okay but what if the db gets pwned

😂

no but i’ve seen a spreadsheet crash

ever seen a db lock itself out

it’s just a glorified excel sheet

why we don’t trust the db for auth