Bill Frantz (frantz@netcom.com)
Thu, 29 Apr 1999 09:40:19 -0700
At 11:18 AM -0700 4/28/99, bram wrote:
>On Wed, 28 Apr 1999, Salz, Rich wrote:
>
>> >The alternative is to write them all
>> >down in one place
>>
>> Or pick a random "base" and then add obvious per-site info, as in
>> xyzzy.microsoft
>> xyzzy.nytimes
>> xyzzy.clublove
>> etc...
>
>That's a pretty good idea - it reduces significantly the risk of someone
>extending a breach of one password to another, since an automated tool
>which just reuses all the passwords elsewhere won't work. It still does
>allow for breaches of passwords in one place to extend elsewhere though.
I divide the world of passwords into two flavors, those where I have an
interest in the security provided, and those where someone else thinks I
should have a password. The first case includes employer/consulting client
machines, my machines, bank accounts etc. The other includes most web
pages like the Java developer, and the New York Times pages.
For the first class, I try to use good passwords, generated by a
proprietary algorithm, which is different for each user. For the second
class, I use the same easy to remember password everywhere.
-------------------------------------------------------------------------
Bill Frantz | Macintosh: Didn't do every-| Periwinkle -- Consulting
(408)356-8506 | thing right, but did know | 16345 Englewood Ave.
frantz@netcom.com | the century would end. | Los Gatos, CA 95032, USA
The following archive was created by hippie-mail 7.98617-22 on Thu May 27 1999 - 23:44:23