Why your tiered password scheme is flawed, and what to do about it.

Re:Why your tiered password scheme is flawed, and what to do... by markessien on Friday February 27, 2009 @10:40AM (#497285)

So the flaw is that if one site is hacked, all the sites are hacked? And because of that, people will start sending spam from my account?

That argument does not make sense. Most sites do not send things out using my name, and those that do have very limited options for spammers. For example flickr, or Hacker News.

[ Parent | on HN ]

Re:Why your tiered password scheme is flawed, and what to do... by philh on Friday February 27, 2009 @11:42AM (#497343)

I use the same pseudonym for several sites, some of which have my email address in my profile. If I was using the same password for all of them, access to any would mean I was compromised.

I certainly wouldn't consider "they may know my password, but they'll never guess my email address" to be reasonable security.

[ Parent | on HN ]