News for hackers. Stuff that matters.
Re:The assault on neurosurgeons’ privileges by software and ... by javajosh on Monday December 07, 2015 @10:16PM (#10694546)
Might I at least suggest using an easy-to-execute algorithm that you can apply to your note to turn it into a real password? There are many options, from adding a prefix, a suffix, adding a small integer to every number, or some combination of these. This, I think, is about as secure as you can get since a targeted attack would just install a keylogger and be done.
Re:The assault on neurosurgeons’ privileges by software and ... by pdkl95 on Monday December 07, 2015 @10:39PM (#10694631)
https://www.schneier.com/blog/archives/2005/06/write_down_yo...

Even with an algorithm, you're still relying on human memory. As Schneier and other have been recommending for a long time, write down your passwords. People already understand some amount of physical security, which is knowledge that can can utilized for password storage.

As long as human memory is the weakest link, password strength will always be de facto limited to the amount of entropy that a human can reasonably memorize. Unfortunately, brute-force password cracking capabilities flew past that limit a long time ago.

Re:The assault on neurosurgeons’ privileges by software and ... by Ntrails on Tuesday December 08, 2015 @04:31AM (#10695521)
My last work sent around a cardboard triangle "stand" thing which was supposed to remind us all about how much we loved working there and how important such and such policies were. So my password was set as the first 3 letters of the first 3 lines (inc capitalisation) followed by a fairly standard & [incrementing number]. It was written down right next to my computer for the first two weeks whilst I learnt it and then every other password was just a derivation of it.
Re:The assault on neurosurgeons’ privileges by software and ... by engi_nerd on Monday December 07, 2015 @10:21PM (#10694571)
I have a couple of things I add to each password that I don't write down. I change those things every month. That's about the best I can do.
Re:The assault on neurosurgeons’ privileges by software and ... by agumonkey on Tuesday December 08, 2015 @04:12AM (#10695470)
A friend and I do this, but there's always a few website that will not fit your alphabet.