4 ms·
Yeah but no user is ever going to be able to remember either of those passwords, even the website encourages people to write it down. So when the FBI raids John
by upperechelon 12y ago
Yeah but no user is ever going to be able to remember either of those passwords, even the website encourages people to write it down. So when the FBI raids Johnny's house and they find his post-it note next to his computer he's gonna be in a lot of trouble. And before you mention password management applications... that would also be a solution for the 'users pick bad passwords' problem
- wtbob 12y ago> Yeah but no user is ever going to be able to remember either of those passwords, No, of course not. User-memorable passwords should only be used on devices physically controlled by the user or someone the user trusts; high-security passwords must be used on any device outside of the user's control. It's okay to use the user's password to locally encrypt a secure key used to encrypt remote data.