|
Authored by: artp on Wednesday, August 22 2012 @ 12:57 AM EDT |
But when you type the wrong password into a website, that
password is now memorialized in plaintext in the error logs.
Anyone who wants to mine passwords (legally or otherwise) is
already mining error logs for valid passwords that have been
used in the wrong place.
It is better to use a password safe, and keep your passwords
there. Whether that is an application with strong
encryption, or a file folder with a misleading label, it is
still safer than trying to remember which password you used
on which site. Because eventually, you will forget. It is
"when", not "if".
---
Userfriendly on WGA server outage:
When you're chained to an oar you don't think you should go down when the galley
sinks ?[ Reply to This | Parent | # ]
|
|
Authored by: cjk fossman on Wednesday, August 22 2012 @ 01:11 AM EDT |
I am a strong passphrase fanatic. I drive my spouse crazy
with the passwords on our bank web sites.
Most of my passwords run 20+ characters in length with
numerics and 'special' characters, where allowed.
But even I would find it tedious to do what's suggested.
I just have an encrypted file in my home directory with all
the passwords in it. It's actually in a subdirectory, but
you get the idea.[ Reply to This | Parent | # ]
|
|
Authored by: PJ on Wednesday, August 22 2012 @ 11:45 AM EDT |
It would probably be better to use the first letter of
each word in the paragraph, instead of whole dictionary
words, and capitalize some letters and include some
punctuation.[ Reply to This | Parent | # ]
|
|
|
|
|