CHI-WEB Archives

ACM SIGCHI WWW Human Factors (Open Discussion)

CHI-WEB@LISTSERV.ACM.ORG

Options: Use Classic View

Use Monospaced Font
Show Text Part by Default
Condense Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Sender: "ACM SIGCHI WWW Human Factors (Open Discussion)" <[log in to unmask]>
X-To: Hal Shubin <[log in to unmask]>
Date: Wed, 15 Oct 2008 16:06:08 +0100
Content-Disposition: inline
Reply-To: Dug Falby <[log in to unmask]>
From: Dug Falby <[log in to unmask]>
Content-Transfer-Encoding: 7bit
In-Reply-To: <[log in to unmask]>
Content-Type: text/plain; charset=ISO-8859-1
MIME-Version: 1.0
Parts/Attachments: text/plain (75 lines)
Hal,

Think of attention and personal information as hard currency.

Your security or challenge/response system has to be progressive.

At first you give me a little and I'll give you a little.

If I like your product I'll let you geolocate me.

If I buy your product you can have my address.

and so on :-)

It's all about the constructive exchange of value.

Best,
Dug


On Tue, Oct 14, 2008 at 8:40 PM, Hal Shubin <[log in to unmask]> wrote:
> When you want people to sign up for a free trial of a Web application, you
> want the signup process to be as quick as possible. Email address and
> password (plus password confirmation) seems the be the least amount of
> information.
>
> But, what happens when that user has to recover her password? Because the
> signup didn't ask for any sort of security information, how can we verify
> that it's the right user? We need some other information, but that makes
> signup longer.
>
> This seems trivial (just ask for the customer's first pet's elementary
> school principal's favorite color), but I'm sure the Marketing folks will
> balk when I suggest adding to the nice, short signup process.
>
> I thought of the explanation Staples.com gave when they started asking for
> ZIP/Postal codes before showing products: we can serve you better if we know
> where you live, and know what stores and products are nearby (or something
> like that, and they don't seem to do it anymore). If we do ask for a
> security token, explaining the purpose might make it seem like a *good*
> thing to prospective customers.
>
> Any thoughts or experience with this?
>
> thanks                          -- hs
>
> . . . . . . . . . . . . . . . . . . . . . .
> Hal Shubin
> Interaction Design, Inc.
> 617 489 6595
> www.user.com
>
>   --------------------------------------------------------------
>   Tip of the Day: Use the archives to research common questions
>    CHI-WEB: www.sigchi.org/web POSTINGS: mailto:[log in to unmask]
>             MODERATORS: mailto:[log in to unmask]
>      SUBSCRIPTION CHANGES & FAQ:  www.sigchi.org/web/faq.html
>   --------------------------------------------------------------
>
>



-- 
Dug Falby
+44 75 15 66 16 55
http://www.donkeyontheedge.com/

    --------------------------------------------------------------
    Tip of the Day: Suspend your subscription if using auto replies
     CHI-WEB: www.sigchi.org/web POSTINGS: mailto:[log in to unmask]
              MODERATORS: mailto:[log in to unmask]
       SUBSCRIPTION CHANGES & FAQ:  www.sigchi.org/web/faq.html
    --------------------------------------------------------------

ATOM RSS1 RSS2