[clue] Passwords (was Re: Website and git.)

[Vincent Randal]

I'm joining this discussion late. Not sure I understand the full import of this thread but I will say this ...

On NPR yesterday there was some talk about password management. I dealt with this problem a few years ago by permuting a couple pieces of info. I have many passwords and I remember none of them. I figure them out based on a pattern (permutation). Is this good or bad? The info used in the permutation is a private piece of info and a piece of info derived from the account I want to access. The private info and permutation is known only to me. I have tons of strong passwords.

I hope I've not derailed this thread with my comment. Carry on good people.


________________________________
 From: jacob <jborer at gmail.com>
To: CLUE's mailing list <clue at cluedenver.org> 
Sent: Wednesday, September 19, 2012 10:15 AM
Subject: Re: [clue] Passwords (was Re: Website and git.)
 

As an aside. Anyone using a service like gmail or yahoo mail should turn on two factor authentication. 

Google also offers Application Specific Passwords that can be easily revoked for use cases where the password is persisted to disk. (Like an email sync client)   Gmail also provides a details link on the bottom of gmail which will show you where activity is coming from. I do not know what other services offer these features.

Passwords get compromised and stolen easily. If someone can access your email they have the keys to the castle usually.

-jacob

p.s. I work for Google so my opinions may be biased. Also my opinions do not necessarily represent Google.


On Tue, Sep 18, 2012 at 10:33 PM, David L. Anselmi <anselmi at anselmi.us> wrote:

Gary Romero wrote:
>> You mean you guys aren't using KeePass?
>
>Yes, because that's the only way to stay sane.  But passwords still suck.  And they've been obsolete
>for years (close to 10 that they haven't provided needed security and at least 5 that other things
>have been available).
>
>Dave
>
>_______________________________________________
>clue mailing list: clue at cluedenver.org
>For information, account preferences, or to unsubscribe see:
>http://cluedenver.org/mailman/listinfo/clue
>

_______________________________________________
clue mailing list: clue at cluedenver.org
For information, account preferences, or to unsubscribe see:
http://cluedenver.org/mailman/listinfo/clue
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cluedenver.org/pipermail/clue/attachments/20120919/2956d133/attachment.html