Cristiano

The End of the Password as We Know It - Technology - The Atlantic Wire

__________________
"For my part, I know nothing with any certainty, but the sight of the stars makes me dream" - Vincent Van Gogh

* my blog *

Rebel Television

This is why I try to get everyone I know to use a unique password for every site. But it can be impossible to explain why. To most people, salting is something you do to french fries.

eku Zhong

__________________
Culprit Blog * Culprit Store

DanielRavenNest

The article is more about "The End of Password Storage as We Know It", and not passwords themselves.

What we need are things like USB keychains, where you need a physical device in addition to the password to log in. Then stealing the password won't help, cause you need the device in addition.

Lord

I guess we'll have to graduate to PassSentences next ?

Rebel Television

Blizzard has been increasingly insistent that people use authenticators when playing their games, and has vehemently claimed that the vast majority of all account compromises are via phishing, keylogging, or other social engineering. There's been increasing amounts of circumstantial evidence mounting up, however, that what's really happening is session spoofing, and the authenticator is starting to look like a red herring.

Sonja Aeghin

And the authenticator isn't foolproof, either. There have been cases of authenticator-linked accounts getting compromised.

Adeon Writer

I prefer constantly changing passwords. at college all the professors carried a device that told them the password for the current 10-second window.

Argent Stonecutter

SecureID tokens, that's a good business to be in. The tokens are sealed and have a battery that lasted a couple of years, and are disabled well before that... so you have to get another one on a regular basis. From RSA. The security argument is reasonable, but I still think it's mostly about recurring revenue.

__________________
Argent Stonecutter -- Skyhook Station -- Coonspiracy Store

"And now I'm going to show you something really cool."


The previous is a cybernetic datum published - in direct contravention of DoD Regulation #229RR3X3 - as being conducive to the physical, psychological and/or social well-being of the population.

Brenda Archer

In my ideal world sites with large numbers of users, and therefore large numbers of users who don't know how to protect themselves on the internet, would make easily available a good explanation of all the necessary basics to protect yourself online. These tutorials should be written at a VERY basic level in 5th grade English.

Part of discouraging the problem is reducing the supply.

bladyblue

We are going to have to use bluetooth eye scanners just to check our e-mail.

__________________
I've seen things you people wouldn't believe. Attack ships on fire off the shoulder of Orion. I watched C-beams glitter in the dark near the Tannhauser gate. All those moments will be lost in time... like tears in the rain...Time to die.-Roy Batty

Void

I dunno why... should be really simple.

give password to e-mail service, some employee steals password and looks at your e-mail... they now have your password an probably a bunch of sites you log into... if you used the same password for all of them, you've handed them every site linked to your account.

it'd be like having one key made for your house, your office, your bank, and your car, and then giving a copy of the key to your landlord, your manager, the credit card company, and your car insurance agent... some asshole making a copy of any one of them now has access to everything you have. even if you figure out which one got the key stolen/copied from it, you have to change them all, and anything could be lost.

__________________
- These eyes can do more than see

Alexi Reggiane

At my place of employment we have fingerprint readers to log into computers. My laptop has a fingerprint reader on it. Seems like this might be a good way to go. I don't like using the same passwords for different logins but I am constantly forgetting them to sites i don't go to often. Let me just swipe my forefinger instead.

bladyblue

This is how you guys probably have top secret discussions:

Void

I really hope those aren't commercial grade print scanners.... those things are crap.

Robert Jung

Can you guys keep a secret?

I use my name for my password ---- but I put the middle name first, the last 2nd and the first last.

Nobody will ever figure that out.



;-)

Lil Hapmouche

Does it recognize the fingerprint of a single finger or does it store the data for each one with its minor differences?

If it's a single finger, you're pretty much screwed if you find your "sensor finger" covered in a thick band-aid one day and the reader stubbornly refusing to recognize any of your other unhurt fingers.
Been there, cursed and bitched at that...

Ann Otoole

fingerprint readers fuck up. then you have lost all data.

Argent Stonecutter

That's _old_ technology. I remember reading about mobile phones with fingerprint readers in them when I was in high school in the '70s. We're just barely catching up with 40 year old popular science magazines.

Evil String

I'd prefer a fart smell sensor. Mine are unmistakable.
If I couldn't remember my password I would only have to eat some beans instead.

Ann Otoole

maybe you need to get that nematode issue treated.

Nibb Tardis

In most cases, you can override fingerprint readers and type your password. They are just a convenience.

But they can be easily spoofed.

Lord

Why is it that people think that a string of code transmitted through the air is safe (even when encrypted)?

Kalel

Sense of false security we've gotten from having to constantly remember and use Passwords .

if you can't see it and/or don't know it. Then it's secure to their minds...

__________________
"In theory, theory and practice are the same. In practice, they are not."
-- Lawrence Peter Berra

Ramen Jedburgh

I have a good system worked out to generate easily remembered unique password for every site.

It is basically [Password slug][Personally important number][site specific keyword]

As example, and no, these are not my passwords... Say, the meaningful number is my address, which hypothetically is 101. The slug here will be Password with a capital letter.

You get
SLU: Password101virtualworld
Twitter: Password101tweeting
Favebook: Password101status

That sort of thing. It also makes them long.

For anything critical (ie dealing with money, ebay, amazon, bank, paypal) They all have their own, entirely unique passwords.

__________________
--
Ramen Jedburgh
Abusively Cute ^_^