Re:Stop forcing arbitrary password rules
by whyoh on Saturday October 24, 2015 @07:34AM
(#10443262)
No doubt a lot of people suck at password management, but with proper management it's easier for a thief to steal a hardware key.
Or a phone. Which is why I hate that some new services require a phone number for authentication.
[ Parent
| on HN ]
Re:Stop forcing arbitrary password rules
by mattmanser on Saturday October 24, 2015 @07:41AM
(#10443280)
It's easier for a thief targeting specifically you, but that's not what most password hacks are about.
Re:Stop forcing arbitrary password rules
by codedokode on Saturday October 24, 2015 @07:39AM
(#10443274)
I don't think so. Stealing passwords from password manager with a trojan software is much easier (and safer) than breaking into somebody's house. In some countries you can even get shot for that.
You can say the same about credit cards: they can easily be lost, stolen etc. But generally they are better protected than internet bank account with just a password.
And the most appealing point is ease of use. Inserting a key and pressing a button is much easier for a common person than dealing with complicated matters like login, email or password.
Re:Stop forcing arbitrary password rules
by aianus on Saturday October 24, 2015 @08:04AM
(#10443346)
> You can say the same about credit cards: they can easily be lost, stolen etc. But generally they are better protected than internet bank account with just a password.
I've physically lost one credit card and had multiple ones canceled unilaterally by the bank because some idiot merchant got hacked. On the other hand (afaik) I've never lost any bitcoin or any bank logins/passwords that were fully under my control.