4 ms·
Not a perfect metric as he admits, but a great deal better than nothing. One thing that has bothered me from the beginning is the problem of the user's retentio
by hsmyers 14y ago
Not a perfect metric as he admits, but a great deal better than nothing. One thing that has bothered me from the beginning is the problem of the user's retention of the information. How do we do a min/max of sufficient complexity to deter cracking but allow the user to remember the password in question? This last is one reason that I've kept up interest in bio-metric efforts for security.
- danpalmer 14y agoI always find alternatives to password security interesting, but I don't think any are actually feasible at the moment. We need to realise that passwords are here to stay for a long time, and we need to promote the use of strong passwords that will last a long time. "8 characters with a number" - the criteria many normal users consider a good password, is just not good enough any more in this ago of $2.50 an hour for an EC2 instance with a few graphics cards.