3 ms·
You would think changing passwords every month is more secure, when in fact is much less secure for the reasons he explained. People tend to get tired of remem
by Kilimanjaro 16y ago
You would think changing passwords every month is more secure, when in fact is much less secure for the reasons he explained.
People tend to get tired of remembering passwords so they write it down on a post-it and stick it on the monitor.
How is that for secure?
- nodata 16y agoWell you'd be surprised actually: it's very secure if you're the only one with access to the post-it.
- tptacek 16y agoI don't think it's possible to extract "much less secure" from that post (he has carefully hedged it to avoid writing anything falsifiable). The only downside he's explicitly cited is that he thinks it might cause people to pick less secure passwords. I have a hard time buying this argument, because people pick godawful passwords anyways; the very few people who pick decent passwords are probably not derailed too much by a periodic change requirement. And, for what it's worth: Schneier himself advocates writing passwords down.