3 ms·

Passwords are dead, and what really needs to happen is that we all have some type of software we can download and put on our USB sticks. We stick the USB stick

Passwords are dead, and what really needs to happen is that we all have some type of software we can download and put on our USB sticks. We stick the USB stick into a drive, type in a 4 digit pin code and on that PC we are now securely logged in till we pull that USB stick out. Whenever a site is opened that requires even more level of security (like a bank page), we have an additional level 2 security code. Thank God someone finally sees that OpenID is a waste of time and resources. I really don't understand why so many tech kids are jumping on this openid bandwagen when it is: 1. Difficult to use 2. Confusing 3. Has no obvious advantages for most end users 4. Insecure by design

kingkongrevenge 18y ago
Get rid of ATM pin codes, too. All you should need is the card. And the same card for all your bank accounts! Anything that requires physical access to a card or usb stick or a specific computer to do things on the web is a non-starter. Given this constraint, passwords work fine. The problem boils down to the completely unavoidable security vs. ease of use trade-off. I say just get rid of the complexity requirements. If someone wants to enter a blank password for all their needs, let them. I personally will keep track of my varied and complex passwords.
- maxklein 18y ago
  I don't really need to have a USB stick to use this system, as it is just software. In emergency situations, I can ask another site to act at the USB stick, and then type in my pin code there. So it's still secure, as people do not know my pin code. Sure, keep using your passwords, my grandpa also loves using his walkie talkie.
  - kingkongrevenge 18y ago
    > I can ask another site to act at the USB stick That's OpenID. I assume you're going to use a password for your StickKey host provider.
    - maxklein 18y ago
      That's not Open ID, because this is just a backup solution, and is not the main authentification scheme.

kingkongrevenge 18y ago

Get rid of ATM pin codes, too. All you should need is the card. And the same card for all your bank accounts! Anything that requires physical access to a card or usb stick or a specific computer to do things on the web is a non-starter. Given this constraint, passwords work fine. The problem boils down to the completely unavoidable security vs. ease of use trade-off. I say just get rid of the complexity requirements. If someone wants to enter a blank password for all their needs, let them. I personally will keep track of my varied and complex passwords.

maxklein 18y ago
I don't really need to have a USB stick to use this system, as it is just software. In emergency situations, I can ask another site to act at the USB stick, and then type in my pin code there. So it's still secure, as people do not know my pin code. Sure, keep using your passwords, my grandpa also loves using his walkie talkie.
- kingkongrevenge 18y ago
  > I can ask another site to act at the USB stick That's OpenID. I assume you're going to use a password for your StickKey host provider.
  - maxklein 18y ago
    That's not Open ID, because this is just a backup solution, and is not the main authentification scheme.