Google cryptographer and all-round security expert Ben Laurie's been blogging some great security thinking lately. Today he's got a really fascinating, thoughtful piece about the problems of passwords:
So, where does this leave us? Users must have passwords, so why fight it? Why not admit that its where we have to be and make it a familiar (but secure) process, so that users can actually safely use passwords, phishing-free?
Do Passwords Scale?
The answer to this is deeply sad. It is because we have done a fantastic job on usability of passwords. They’re so usable that anyone will type their password anywhere they see the word “password” with a box next to it. Phishing is utterly trivial because we have trained the world to expect to be phished every time they see a new website.
Of course, we can fix this cryptographically - that’s easy. But let’s say we did that. How do we stop the user from ever typing their password into a phishable box from this day forward? So long as they only ever type the password into the crypto gadget that does the unphishable protocol, they are safe, no matter who asks them to log in. But as soon as they type it into a text box on a web page, they’re screwed.
So, this is why passwords are the worst usability disaster ever.
These Soviet safety posters delivered their message in bold terms.
The U.S. National Highway Traffic Safety Administration (NHTSA) today said it is opening a preliminary investigation into 25,000 Tesla Model S cars, following the death of a driver who was killed using the vehicle’s Autopilot mode.
Bleach-toothed motivational speaker Tony Robbins charged between $650 and $3000 for tickets to his 3.5 day Unleash the Power Within seminar outside Dallas, Texas, where participants are taught to walk on hot coals.
These days, the vape market is saturated with low-quality products, making it nearly impossible to separate the gems from the duds. The Atmos Rx Dry Herb Vaporizer stands out from crowd for two reasons: its impressive battery life and durable construction. This high-end little gadget is compact enough to fit in your pocket, and packs a powerful punch, […]
If you’re like us, you occasionally get ambitious with your dinner and try to cook multiple sides plus a main dish. These efforts usually end as a cold meal plus a pile of dishes to wash. MasterPan Multi-Sectional Meal Skillet makes it super easy to make multiple dishes at once without the hassle. This heavy gauge bottom pan […]
The Lytro Illum is our all-time best-selling camera and here’s our best deal yet. Apply the code “Lytro10” to save an extra 10% off on this camera’s mind-blowing functionality in this exclusive one day only sale.