Mele20
Premium
join:2001-06-05
Hilo, HI
| reply to Daniel
Re: Big Sites That Don't Allow Complex Passwords !?!
Why are you trying to remember passwords? I use no password manager, I never allow Fx to remember passwords. I write them all down (different one for each site) in two paper files...one for normal sites and one for banking sites. I generally meet my friends away from my home because of no parking for guests here and they don't want to park on the street because this is a heavily traveled beach street with lots of drunks/speedera/pakalolo high drivers hitting poles and cars. My point being that I don't have to hide the password folders since I am usually the only one in this condo.
I would never be able to remember any password that had characters other than numbers and letters and those would need to be too simple for safety for me to be able to remember them...memory deteriorates with age so it not realistic to tell older folks that they need to use special characters in passwords, memorize them all and change them every three months and then memorize them again. I rely on my bank to shut out anyone, including myself, after three tries. My home bank has a very elaborate procedure for how one gets one's account accessible again after being locked out. My other home bank is ever more of a hassle...you have to apply in writing via snail mail for a new password which is mailed after two to three weeks. You have no access to your account online during that waiting period. Why are these methods, that are in place at most banks, so poor security wise? I suppose if you choose JohnDoe1 as your password that might be easily guessed in three tries but most folks know to use something like 5s69bbl0gz6u3 as a password and I don't believe that is likely to be guessed in three tries before the bank locks the account.
As for AARP in this day and age requiring a SS number is criminal. Of course, all banks and credit card issurers still require the number instead of asking for the driver license number or something else..birth certificate, etc.
--
"If you want to do DRM on a PC then you need to treat the user as the enemy." Ross Anderson in "`Trusted Computing' Frequently Asked Questions"
»www.msfirefox.com/ |
