Tag: passwords
-
A Random List of Silly Things I Hate
Just a list of eleven random silly things that I hate, to various degrees.
-
How an RM Nimbus Taught Me a Hacker Mentality
Thirty to thirty-five years ago, as a young and curious hacker, I broke out of the restrictions on my secondary school's computer lab and briefly achieved rockstar popularity amongst peers who, through my tools, could now play videogames instead of doing their coursework. But their interest in the results of my exploits were incompatible with my interest in the sheet joy of discovery... and, inevitably, this meant trouble.
-
Hive's Password Policy Makes Me Cry
Hive's password form can't decide whether you need 8+ or 12+ characters, gives misleading error messages and... requires that you use a 'special character' except most special characters (including most common punctuation) is secretly banned, and gives you a misleading error message if you try to use it. Do better, Hive!
-
Brainfart
Brainfart moment this morning when my password safe prompted me to unlock it with a password, and for a moment I thought to myself "Why am I having to manually type in a password? Don't I have a password safe to do this for me?" 🤦
-
Keeping 2FA Secrets in a Password Safe?
I use my password manager to generate TOTP second factor codes. I know this is controversial, with some folks claiming it reduces multifactor authentication down to a single factor and is therefore no better than just a username/password, but I disagree, and I can explain why.
-
I'd Like to Change my Mother's Maiden Name
LastPass users are having to cycle their passwords in the light of a recent security incident. That might well include their "security question" answers, which necessarily leads to some amusing conversations.
-
Can I use HTTP Basic Auth in URLs?
Dan dives into HTTP Basic Authentication, its history, and how modern browsers support it, with a focus on URL-based credential passing.
-
Protecting Yourself from Identity Theft
Bruce speaks my mind.
-
...you wouldn't believe how often I'm told I'm not allowed to use the letter "Q" in passwords...
-
Security Checklist
Be safe on the internet.
An open source checklist of resources designed to improve your online privacy and security. Check things off to keep track as you go.
...
SecurityCheckli.st
I'm pretty impressed with this resource. It's a little US-centric and I would have put the suggestions into a different order, … -
2004 called, @virginmedia. They asked me to remind you that maximum password lengths and prohibiting pasting makes your security worse, not better.
-
German chat app slacking on hashing fined €20k
by Richard Chirgwin (The Register) German chat platform Knuddels.de ("Cuddles") has been fined €20,000 for storing user passwords in plain text (no hash at all? Come on, people, it's 2018).
The data of Knuddels users was copied and published by malefactors in July. In September, someone emailed the company warning them that user data had been … -
Hey @aqldotcom: why must my password for your enterprise telecommunications platform be no longer than 12 characters? Are you worried my #passwordistoostrong? CC @pwtoostrong -
Password Rules Are Bullshit
Of the many, many, many bad things about passwords, you know what the worst is? Password rules.
If we don't solve the password problem for users in my lifetime I am gonna haunt you from beyond the grave as a ghost pic.twitter.com/Tf9EnwgoZv
— Jeff Atwood (@codinghorror) August 11, 2015
Let this pledge be duly … -
Let them paste passwords
One of the things people often tweet to us @ncsc are examples of websites which prevent you pasting in a password. Why do websites do this? The debate has raged - with most commentators raging how annoying it is.
So why do organisations do this? Often no reason is given, but when one is, that reason …