4 ms·
My problem with security is that attacks get more and more advanced but users are just as clueless as ever, so we’re headed towards doom.
by Rjevski 8y ago
My problem with security is that attacks get more and more advanced but users are just as clueless as ever, so we’re headed towards doom.
- eaandkw 8y agoI think it would be more accurate to say that users are fatigued and worn out. Password fatigue is a thing. The updated password guidelines from NIST are a good start. Or the users are negligent rather than clueless. Look at the DNC hacks of Podesta.
- Rjevski 8y agoPassword fatigue is easily mitigated by password managers. The issue is that users are too stupid and don't care to spend the time/money to do things the right way, and instead keep on reusing the same password everywhere.
- magduf 8y agoNo, claiming password managers will solve everything is rather clueless. Password manager don't work across multiple systems. How am I supposed to log into some website from my work computer when the password is on the password manager on my home computer? Or what about my cellphone? (And no, my IT department would not allow me to install a password manager that syncs.) In a typical workday, I use 4 different computers, plus several VMs and other work accounts, all with their own passwords. Password managers aren't possible on my work computers and VMs. I reuse passwords as much possible.