|  RSS

PC World Forums: One-Third Use a Single Password for Everything - PC World Forums

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

One-Third Use a Single Password for Everything

#1 User is offline   PCWorld Icon

  • Advanced Member
  • PipPipPipPipPipPipPipPip
  • Group: PCWorld BOT
  • Posts: 44,297
  • Joined: 01-August 07

Posted 11 March 2009 - 10:10 AM

Post your comments for One-Third Use a Single Password for Everything here
0

#2 User is offline   mjd420nova Icon

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 1,519
  • Joined: 05-August 06
  • Location:Fremont, California

Posted 11 March 2009 - 11:04 AM

I use a combination of passwords and also inter-change letters and numbers to insure better security. Names of children, pets and real or cartoon characters is a big no-no for me. The intermixing of numbers also makes it harder for others to either guess or deduce.
0

#3 User is offline   Hiliftjack Icon

  • Newbie
  • Pip
  • Group: Members
  • Posts: 5
  • Joined: 14-October 08

Posted 11 March 2009 - 11:58 AM

The author makes a politically correct point but to be able to follow such a policy is absurd. I just counted my list (printed and kept at my desk) of 71 Web sites and passwords. When I travel I have to take the list with me. If somebody robs me or I loose the list, they have it all. What else can I do? Its like having to have a different key to every entry door, toilet door and closet door in my house. Lets face it. Its not practical! Lets spend more time getting a more secure environment and reduce this security problem. Put the bad guys in Jail!
0

#4 User is online   WinTard Icon

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 3,157
  • Joined: 16-January 09
  • Location:Look behind you...

Posted 11 March 2009 - 03:58 PM

No wonder there is so much malware out there, affecting so many. And the culprits blame vulnerabilities in the OS! Yet to others, by being diligent, malware simply doesn't exist.

Perhaps technology should come to assist? How about biometrics seed key, and some password managers, including functions to reset them from various online sites (such as forgotten password, back to your registered email) but done so we don't even know the password, except to the password manager? Food for thought... Of course the password manager must have a combination of a password, plus the biometrics. No security through obfuscation. Open-source and free would be best.

For older systems not implementing biometrics yet, a simple secure, encrypted USB memory key would suffice. Just don't lose the key, or keep a backup in a safe place, elsewhere. Just in case your house, or workplace burns down to the ground... Hey you never know for sure...

~~~~~~~~~
Programming is like sex. One mistake and you have to support it for the rest of your life.
~ Michael Sinz

The procedure is to remove and clean your customer's balls.
~ IBM mouse service manual

Software is like sex: it's better when it's free.
~ Linus Torvalds, father of the Linux OS
0

#5 User is offline   number6 Icon

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 2,357
  • Joined: 28-March 08

Posted 11 March 2009 - 04:40 PM

The problem is with the user. No matter how much security you put into something, if it's easy enough for the common user to get through, the hacker will too.
0

#6 User is offline   gundark Icon

  • Advanced Member
  • PipPipPipPip
  • Group: Members
  • Posts: 155
  • Joined: 18-August 06
  • Location:In my chair

Posted 12 March 2009 - 08:50 AM

@ Hiliftjack:
I use the opensource program Password Safe for my passwords. I load it on a USB stick as well as my local machine.
It generates all passwords (very secure ones) for me. I have it protected with a secure password created using the "first letter from every word in a sentence plus numbers" method.
There's only one password I need to remember. Since I always carry that USB stick with me, my passwords are available at pretty much any PC I happen to use.
Check out Password Safe.
http://passwordsafe.sourceforge.net/
0

#7 User is offline   krawly Icon

  • Newbie
  • Pip
  • Group: Members
  • Posts: 1
  • Joined: 12-March 09

Posted 12 March 2009 - 09:39 AM

Here is a tip. When signing up for something that requires a email address and password, do not use the password that belongs to that email address you used to register on a website. I knew of a person whom would always check peoples email this way. He would find banking info all the way up to knotty pictures of girlfriends. You would think most people would not do it, but a lot do...
0

#8 User is online   WinTard Icon

  • Expert
  • PipPipPipPipPipPip
  • Group: Members
  • Posts: 3,157
  • Joined: 16-January 09
  • Location:Look behind you...

Posted 12 March 2009 - 10:58 AM

@ gundark thank you! I didn't know about that, and am immediately going to try and probably adopt it! Thanks again my friend.
0

#9 User is offline   HighSierra Icon

  • Member
  • PipPip
  • Group: Members
  • Posts: 42
  • Joined: 21-July 07

Posted 14 March 2009 - 05:18 AM

I think most of these so called "security experts" are blowing smoke out of their you know what.
Most web sites that you register for don't hold any information that you need to secure, so you can use one password for them all. Just make sure that your email and banking passwords are strong.
0

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users