Google and Password Security

#1

Post by wesleyac » Thu, Mar 13, 2014, 3:48 AM UTC

Google and Password Security
wesleyac.x64.me

Re: Google and Password Security

#2

Post by skj » Thu, Mar 13, 2014, 4:53 AM UTC

They would not have to store your password to know that you typed an old one by accident, just a hash.

Re: Google and Password Security

#3

Post by wesleyac » Thu, Mar 13, 2014, 5:08 AM UTC

skj wrote: post #2

They would not have to store your password to know that you typed an old one by accident, just a hash.

That is true, but all of the things in that post are still true. All of the password recovery steps will work, no matter how the backend is done.

Re: Google and Password Security

#4

Post by jmcphers » Thu, Mar 13, 2014, 5:12 AM UTC

If you're this concerned about your password security, you should be using Google's two-factor authentication.

http://www.google.com/landing/2step/

Re: Google and Password Security

#5

Post by wesleyac » Thu, Mar 13, 2014, 5:17 AM UTC

jmcphers wrote: post #4

If you're this concerned about your password security, you should be using Google's two-factor authentication. http://www.google.com/landing/2step/

It's not that I am concerned about my security, as I use text message verification to recover my password. My issue with this it that people who don't give their phone number to google can be effected by this.

EDIT: Just set up 2 factor auth. Looks cool, until my phone dies and I don't have the backup codes with me.

Re: Google and Password Security

#6

Post by pronoiac » Thu, Mar 13, 2014, 5:32 AM UTC

The server's overwhelmed. Try the Coral Cache: http://wesleyac.x64.me.nyud.net/blog/?p=25

Re: Google and Password Security

#7

Post by wesleyac » Thu, Mar 13, 2014, 5:36 AM UTC

pronoiac wrote: post #6

The server's overwhelmed. Try the Coral Cache: http://wesleyac.x64.me.nyud.net/blog/?p=25

Thanks for letting me know. Just installed A cache plugin for WP, so hopfuly it'll be working again soon.

Strange though, I only see the load at 0.75.

Re: Google and Password Security

#8

Post by pronoiac » Thu, Mar 13, 2014, 5:44 AM UTC

wesleyac wrote: post #7

pronoiac wrote: post #6

The server's overwhelmed. Try the Coral Cache: http://wesleyac.x64.me.nyud.net/blog/?p=25

Thanks for letting me know. Just installed A cache plugin for WP, so hopfuly it'll be working again soon. Strange though, I only see the load at 0.75.

The HTML is loading very slowly - it took 30 seconds in one attempt. And the images aren't working at all. Oh, you're hosting it from your home DSL line? Bandwidth is the problem. Maybe you should save everything into a Dropbox public folder and link it here.

Re: Google and Password Security

#9

Post by wesleyac » Thu, Mar 13, 2014, 5:53 AM UTC

pronoiac wrote: post #8

wesleyac wrote: post #7

Earlier quoted context omitted.

Thanks for letting me know. Just installed A cache plugin for WP, so hopfuly it'll be working again soon. Strange though, I only see the load at 0.75.

The HTML is loading very slowly - it took 30 seconds in one attempt. And the images aren't working at all. Oh, you're hosting it from your home DSL line? Bandwidth is the problem. Maybe you should save everything into a Dropbox public folder and link it here.

> Oh, you're hosting it from your home DSL line? Bandwidth is the problem. Maybe you should save everything into a Dropbox public folder and link it here.

Here you are. https://dl.dropboxusercontent.com/u/92312532/Google%20and%20...

Re: Google and Password Security

#10

Post by BIair » Thu, Mar 13, 2014, 6:14 AM UTC

The article makes a good point. It appears Google storing old passwords indefinitely makes your account potentially less secure. So why do they do it?