101 reputation
1
bio website
location
age
visits member for 1 year, 2 months
seen Apr 14 at 15:59

Apr
14
comment What is the best way to inspire users to choose strong password?
This is horrible advice all around. The 2 "problems" given (users may leave a note on their desk or may let their browser/pw manager save them) are extremely good ideas! #1: If an attacker has physical access to your machine you have lost whatever you do, even if you use truecrypt on your whole HDD and secure boot. #2: A virus/trojan that can read the browser's pw file already has to be elevated (assuming the permissions/ACLs are correctly set; you'd hope so in any case) which means it's game over anyhow. "mycat81" would probably be cracked by any modern hardware in a few hours tops.
Feb
14
awarded  Supporter