4 ms·
You are blaming the victim. Yes, they could have taken more steps to protect themselves, but those steps are inconvenient and cost everybody headspace and heada
by Taek 10y ago
You are blaming the victim. Yes, they could have taken more steps to protect themselves, but those steps are inconvenient and cost everybody headspace and headaches. And if we're all being honest we don't use best practice every time we log into a website.
The real problem is the way that we do passwords. Passwords should either be managed by your browser or your operating system. When you log in to your computer, you log in one time with a public key. And then your OS/Browser automatically logs you into every website you visit by signing challenges instead of by giving your private key (that's essentially what a password boils down to) to everyone who wants to verify your identity.
The same is true for credit cards.
If we want a more secure web, we will replace the password system. It's difficult to use passwords correctly, even if you have the common sense (which a lot of people don't, because they just don't realize it's a bad idea).
It should be a higher priority. People are clearly losing money and losing quality of life over today's insecure password infrastructure.
- ejcx 10y agoOP isn't blaming the victim. Op is playing with fire, KNOWS IT, and is surprised when they get burned. Right now there are many solutions for password management. Free and open source, free and closed source, paid and closed source, enterprise. You name it! "Good password hygiene" is fairly ubiquitous amongst people on this site. With that said, credential management[0] is coming. Google and Apple want to kill LastPass, 1password, and all these companies, and they definitely will AFAICT. [0] https://www.w3.org/TR/credential-management-1/ https://www.w3.org/TR/credential-management-1/
- Al-Khwarizmi 10y agoThere are many solutions for password management, but any solution that can work while travelling (in third-party computers), doesn't need a phone with a data connection, and actually works?
- pfg 10y agoNot sure if I'm parsing your requirements correctly, but 1Password with Dropbox sync would work without a data connection as long as you sync the files beforehand. Works both for Android and iOS. Don't know if adding/modifying entries in the app while offline is possible; so far, I've only needed read access.
- anowlcalledjosh 10y agoKeePass2? There's a portable version that you can drop on a USB stick, and it Works For Me™. http://keepass.info http://keepass.info
- niij 10y agoI hope somebody kills off Lastpass. Worst customer support I have ever received. I've submitted 2 bug reports and 1 feature request since signing up for their paid plan all to have them thrown in their "won't fix" pile. I guess they're too busy making their interface bloated and hard to use to add functionality. /rant
- dave2000 10y ago"You are blaming the victim" Odd way of phrasing it. It's more accurate to say "you're pointing out that they have put themselves at risk through a number of insecure practises". It's not so much blaming a girl for getting raped; more "don't walk around an area that suffers from high crime, at night, using an expensive phone and getting a laptop and flashy camera and act surprised if you get robbed".