Live data from Hacker News

You have exactly three passwords, don't you?

pcmag.com

1–10 of 86 posts

Re: You have exactly three passwords, don't you?

#2
Some systems don't require a complex password. I don't care if someone breaks into the game center thing on the iphone because my password is prettypony2 - what are they going to do, erase my high scores on Tetris? I'm sure as hell not copying and pasting a 16 character password between the LastPass app every time.

Re: You have exactly three passwords, don't you?

#4
post #3

The bank managing my 401k requires a password between 6 and 8 alphanumeric characters. Non-letter, non-digit characters are not allowed.

My bank is worse. They state alphanumeric, their form enforces alphabetic. 6-8 letters. Oh, and did I mention its case insensitive? The card number provides more security than the password.

I can only hope that the case insensitivity is because they're running it through the COBOL equivalent of .tolower() before hashing it, bit given the track record? It's more likely than not they're storing it in plaintext. Just as well I'd not reuse a weak password like that anywhere else.

Re: You have exactly three passwords, don't you?

#5

Some systems don't require a complex password. I don't care if someone breaks into the game center thing on the iphone because my password is prettypony2 - what are they going to do, erase my high scores on Tetris? I'm sure as hell not copying and pasting a 16 character password between the LastPass app every time.

I can't speak for LastPass, but 1Password lets me do Command + / to autofill passwords. No C&P required.

Re: You have exactly three passwords, don't you?

#6
post #5

Some systems don't require a complex password. I don't care if someone breaks into the game center thing on the iphone because my password is prettypony2 - what are they going to do, erase my high scores on Tetris? I'm sure as hell not copying and pasting a 16 character password between the LastPass app every time.

I can't speak for LastPass, but 1Password lets me do Command + / to autofill passwords. No C&P required.

Oh, sorry, I was talking about the iPhone app.

I think Lastpass has keyboard shortcuts in OS X, too, but I usually just click and select from a dropdown.

Re: You have exactly three passwords, don't you?

#9

Some systems don't require a complex password. I don't care if someone breaks into the game center thing on the iphone because my password is prettypony2 - what are they going to do, erase my high scores on Tetris? I'm sure as hell not copying and pasting a 16 character password between the LastPass app every time.

what are they going to do, erase my high scores on Tetris?

Statistics show that most users use the same password everywhere, or at least at many different sites.

I don't know about you in particular, but for any given compromised set of emails and passwords a large number of them are going to work at gmail, facebook, their bank, etc.

Re: You have exactly three passwords, don't you?

#10

The problem with password managers is, when you're away from whatever machine you managed to get the thing set up on, you're locked out of all your accounts.

The 1Password iPhone app has pretty much solved that problem for me:

http://itunes.apple.com/us/app/1password-pro/id319898689?mt=...

Post reply on HN