3 ms·
Right, but those people are the one percent. How do we help the vast majority?
by diego 14y ago
Right, but those people are the one percent. How do we help the vast majority?
- deleted 14y ago[deleted]
- georgemcbay 14y agoOther than education and pushing them to use a secure password manager, I'm not sure, but the solution shouldn't involve breaking existing and secure systems which are widely used even if only by a minority of users.
- diego 14y ago"widely used by a minority" <- you made my point.
- georgemcbay 14y agoNot really. The proposed solution adds little to no real world security (see my other post about how easy it would be to guess which part is the random one which makes this system not useful unless almost all sites use it, which will never happen). Given little to no real world security gain from the described system, it certainly isn't worth breaking an existing system that works just fine and securely even if for just a minority of people.
- ori_b 14y agoFind a way to push for challenge-response authentication with a token that can be put onto a USB key. No, it's not easy to change the infrastructure to handle it, but IMO, it's the best chance to have secure authentication. "This USB key is your identity card." is a simple concept to understand, and better than a password.