  Morac
join:2001-08-30 Riverside, NJ
·Comcast
1 edit | More security = less ease of use
The problem with adding more and more security is it makes it harder and harder on customers. For example back when there were like 2 or 3 user/pass protected websites it was relatively easy to remember a username and password on all the sites. Now-a-days there are thousands. For the longest time I used the same password on almost all of them for ease of use (including banking sites). At some point I realized that wasn't the brightest thing to be doing so I went through every site and changed the password on all of them. Now I need a password manager in order to remember all my passwords. If I'm not at my home computer I can't log into many sites since I don't remember the passwords.
Most people don't want to have to remember hundreds of passwords so they'll use just one or two. Get someone's password for amazon and you most likely have their banks password as well.
About the only way to have high security and ease of use is to use biometrics or some other system where you and your password are not separate entities. There are some devices out there which let you do this on your PC to password protect your files, but until it becomes the defacto standard for security phishing will exist. --
The Comcast Disney Avatar has been retired. |
|
  Jafo232 You Can't Spell Democrat Without Rat. Premium join:2002-10-17 Boonville, NY
·RoadRunner Cable
| Well, I use a mathmatical formula to create my password depending on the domain name of the website. It is a simple formula, but creates strong passwords. As long as I always keep the forumula secret, I should be safe.  -- nos insuadibilis defessus, nos insuadibilis inclino, nos insuadibilis concido. |
|
  sivran Long Live The Suite Premium join:2003-09-15 Arlington, TX clubs:
·RoadRunner Cable
| reply to Morac Ah, the multitudes of passwords one must remember.
What I do to simplify things is keep a set of easy to remember passwords (it used to be just one, short and weak password, but the list has grown somewhat) and use those for "unimportant" things like forums, throw-away email addies, and other sites where it wouldn't matter much if my password were cracked. The passwords in this set vary in length due to length requirements, but are still easy to remember. Most of them I've been using for years anyway so I have them pretty well memorized. The only problem is sometimes I can't remember which one I used, and I end up cycling through them all just to guess...
For more important, sensitive logons like my bank, my router, and admin/root accounts I use longer, more complex passwords. Some of them I have memorized, the rest I keep in Password Safe (which itself is protected by one of the longer passwords I have memorized).
My friend does the same thing, and I suspect a lot of other people might do it as well, though those are the people who generally won't fall for a phishing scam in the first place. -- Think Spyware's bad? TCPA is worse. Fight it! Kerio 2.1.5 - My favorite firewall (Download link updated!) |
|
  technick Premium join:2000-12-16 Loganville, GA | reply to Jafo232 or until the ip's change =P.. well if u base it off ip addresses |
|
  jap Premium join:2003-08-10 038xx
·RoadRunner Cable
| reply to Jafo232 said by Jafo232 : Well, I use a mathmatical formula to create my password depending on the domain name of the website. It is a simple formula, but creates strong passwords. As long as I always keep the forumula secret, I should be safe.
Excellent idea. That's what I need to start doing. I failed math though. Can you PM your formula please? And the last 4 of your social? |
|