Write your passwords down

Re:Write your passwords down by crocowhile on Friday December 17, 2010 @12:48PM (#2016973)

> (I have a second copy of that sheet left with a friend in an envelope)

I love jgc but here he's making the same mistake most people make when they speak about security: assuming all readers have the same need for security and run the same risks. They don't. There is no point for my mom to adopt this system, it's way overkilled for her. (I think there's no point for me either).

One needs to explain to users two things: the first is that there is a big difference between being A target and being THE target. If you are just A target, picking one password for each website you subscribe to is more than enough. If you are THE target, then people will get to you, no matter how secure you think you are.

[ Parent | on HN ]

Re:Write your passwords down by jgrahamc on Friday December 17, 2010 @02:55PM (#2017487)

I somewhat agree, but when mass hacks occur it opens people with poor passwords up to hackers because they've got all the time in the world to see whose accounts they can get into.

BTW Do you use the same password on your Gawker account elsewhere?

[ Parent | on HN ]

Re:Write your passwords down by crocowhile on Saturday December 18, 2010 @03:40AM (#2019175)

As long as the password is unique, it doesn't even matter. Sure, it should be unique yet not revealimg a pattern ("goofy" is ok, "gawker" is not) but there is no need for the user to pass crypto 101.

This for those 1.5m that were just A target; Nick Denton, OTH, was THE target and it was just matter of time for him to get pwned.

>BTW Do you use the same password on your Gawker account elsewhere?

I had to check the other day. I opened that account to leave one comment on lifehacker (that was never approved, actually) and then forgot about it. Turns out the password was safe enough but my mistake there was to use an email address I cared about.

Now I have a less important email address and a supergenpass for everything, except gmail/facebook/dropbox and the other things I care about, for which I have better passwords.

[ Parent | on HN ]

Re:Write your passwords down by jgrahamc on Monday December 20, 2010 @04:29AM (#2023857)

Nevertheless, your Gawker password was crackable with JtR.

[ Parent | on HN ]

Re:Write your passwords down by msg on Friday December 17, 2010 @03:52PM (#2017726)

I usually have two passwords: A stupid one that I only use on stupid sites, and a good one that I use on crucial ones (Gmail, Amazon, bank). There's no relationship between the good and bad passwords, so I feel more confident that I'll be unaffected by data breaches.

I checked the torrent and I guess I never made a Gawker account.

[ Parent | on HN ]

Re:Write your passwords down by jmulho on Friday December 17, 2010 @08:09PM (#2018548)

The problem with that plan is that one day you will learn that someone who works at Google, or Amazon, or your bank or some other "crucial" site has captured millions of username/password combinations and tried them at all the other crucial sites.

[ Parent | on HN ]

Re:Write your passwords down by agraddy on Saturday December 18, 2010 @05:15AM (#2019267)

I like that giving the paper to a friend provides an easy way for a friend to be able to access his accounts in case of a tragedy.

[ Parent | on HN ]