2014 World Cup for predicting winners does not require log-in credentials

Jun 13, 2014 14:53 GMT  ·  By

The classic way to register an account for a web service is to provide at least a username and a password, but in many cases an email address is also required for confirming registration, among others.

A newly created website, dedicated specifically for predicting the winning teams at the 2014 World Cup in Brazil offers the possibility to create an account based on the username alone.

No password or email address is necessary at a later time to access your content. The method is simple: as soon as a username is provided, the website generates a unique URL linked to the account. Accessing your content is then done based on this link. Obviously, keeping it in a safe place is a good idea.

However, this method has its flaws as data leakage could make it in the wrong hands. Also, according to the developer, the website was initially coded by some friends of his so security of the registration and the accounts was not among the objectives.

As far as the security concerns go, obtaining someone’s secret link is fairly easy, especially when considering that links are generally stored in the browser’s navigation history.

On the other hand, implementing such an authentication method for websites with a short-term purpose like Nospronos ensures a larger audience.