Friday, February 22, 2013
Password Security has much room for improvement.
Overall there are many different way to protect your accounts online. The most prominent one is, of course, the password. Although this is a standard in the industry there are many ways that this type of security can be improved. There has been a lot of discussion lately about the possibility of using pass-phrases rather than passwords. This greatly increases the number of permutations that are required to guess a password but overall there is a simpler method available to the general public. If we just limited the number of tries a user can enter a password before either lockout or requiring two factor authentications we can generally increase the amount of difficulty associated with passwords exponentially. There would be no use for brute force attacks against passwords if this limitation existed. I know a lot of people will say that there are many implications associated with password lockout but in the day of smart phones and multiple accounts it would not be difficult to do a password reset via. preset phone number. Although this type of security exists it is also important to realize that this may be too much for the average user, or those people who do not feel as technically savvy. Yes, I think it is important that my e-mail be kept safe, but one of my e-mail accounts can be easily cracked as I don’t particularly mind people reading all of the junk mail I sign up for while some of my other accounts need to be kept as safe as possible because they would provide links directly to my banking information.
One of the central principles of security is that every time you increase the level of security you also decrease the usability of a system. In this instance there should be an increased amount of security surrounding the passwords for your money. When it has nothing to do with anything of your personal life or something that you hold dear you should use simple and easy to remember passwords. Your bank should be exponentially more difficult to access. Below is an article which states that you should use multi-word passwords (lifehacker), but you need to remember that proper grammar is your enemy in this instance. The web comic XKCD has a wonderful example of this in one of their web comics. Ensuring that these gibberish sentences are security is a combination of both the length of the password as well as the difficulty that it presents to rainbow tables. With just a few words you can easily defend what you consider important as well as ensuring that your password is easily memorable compared to the random hodgepodge of numbers, letters, and symbols that is generally used by people to create passwords.
Overall you have to remember that you have prioritize your defenses in what you want to keep safe and what is not as valuable to you. Using simple passwords is acceptable for some e-mails accounts but anything which directs a malicious person to your most valuable assets, memories, etc. should be kept behind the most secure passwords. These
http://lifehacker.com/5796816/why-multiword-phrases-make-more-secure-passwords-than-incomprehensible-gibberish
Subscribe to:
Posts (Atom)
