Page 1 of 1

the inherent dangers of security theater

Posted: Mon Jul 11, 2022 4:51 pm
by Advocate
The Only! time my password is insecure is when i can't remember it, and the Only time that happens is when businesses interfere by prioritizing their own arbitrary rules for their own security priorities; primarily having requirements for specific characters, secondarily requiring a password change. If a password has to be written down, it's not secure and that totally defeats the purpose. I have hundreds of accounts all over the internet. Having a Memorable password creation scheme is essential, and i do have one.

If you can't choose your own password, it's not your password and you aren't being allowed to choose the level of security that actually matches or meets your needs.

Re: the inherent dangers of security theater

Posted: Mon Jul 11, 2022 7:38 pm
by Skepdick
Advocate wrote: Mon Jul 11, 2022 4:51 pm The Only! time my password is insecure is when i can't remember it.
It's also insecure if I can guess it in a few days by a dictionary; or a brute force attack.

Use a password manager to generate unique, difficult-to-remember passwords for each website/platform.
Use your own, memorable password to protect your password manager.

This way you don't have to remember stupid passwords; and you won't re-use your passwords anywhere.
Winning all around.

KeePass is free. https://keepass.info/

Image

Re: the inherent dangers of security theater

Posted: Tue Jul 12, 2022 12:30 am
by Impenitent
to say nothing of the y2k problem

-Imp

Re: the inherent dangers of security theater

Posted: Tue Jul 12, 2022 3:14 am
by Advocate
[quote=Skepdick post_id=582731 time=1657564704 user_id=17350]
[quote=Advocate post_id=582704 time=1657554670 user_id=15238]
The Only! time my password is insecure is when i can't remember it.
[/quote]
It's also insecure if I can guess it in a few days by a dictionary; or a brute force attack.

Use a password manager to generate unique, difficult-to-remember passwords for each website/platform.
Use your own, memorable password to protect your password manager.

This way you don't have to remember stupid passwords; and you won't re-use your passwords anywhere.
Winning all around.

KeePass is free. https://keepass.info/

[img]https://imgs.xkcd.com/comics/password_strength.png[/img]
[/quote]

Then all your security is tied up in one program that must be trusted. That's a single point of failure and doesn't solve keeping everything in your head where it's secure. The first two letters of the website name + your cat's middle initial + the number of drinks you had that one Friday = secure, without trust.