It depends on the security needs of the service. Email addresses are discoverable making it easier for an attacker to target a particular account while usernames give the user the opportunity to further insulate…
It's amazing that we can grant revokable, read-only and audited access to our social accounts, but not our bank accounts. Even though the largest aggregators operate under some level of federal supervision (via FFIEC…
It depends on the security needs of the service. Email addresses are discoverable making it easier for an attacker to target a particular account while usernames give the user the opportunity to further insulate…
It's amazing that we can grant revokable, read-only and audited access to our social accounts, but not our bank accounts. Even though the largest aggregators operate under some level of federal supervision (via FFIEC…