Slashdot Mirror

"That must be annoying to type in every time."

Not if you have a modern password manager.

http://www.roboform.com/

I've used RoboForm [ http://www.roboform.com/ ] for many years. It lets me choose my encryption algorithm (Blowfish, AES, 3DES, etc). I can save links, notes, contacts or personal data. It can fill in web forms for me using artificial intelligence, auto log me in to programs or webpages, it can store my stuff encrypted in the cloud or keep it in a folder, if using the cloud can sync all my computers and my cell phone (all that functionality is on my phone too), has anti-keylogger protection, auto generate passwords, supports finger print readers, and has a nice interface with full search. I highly recommend it and in no way, shape, or form am I connected with that company in any way. I'm just a regular user who has turned on many friends to it. The downside... it's not free and has a yearly cost but it's rather inexpensive (around $10).

You can compensate for password only by using randomly generated long passwords and save them with a program like Roboform so you don't have to remember or type them in.

http://www.roboform.com/

The way the password systems were designed to were stupid to begin with. Programmers designed password systems for people like themselves. The real issue is, programmers did not forsee the internet and the need for easy authentication at multiple sites with strong keys.

I still don't know why Microsoft and other OS makers have not bought out roboform to integrate it into their OS and change the culture over time.

http://www.roboform.com/

Roboform generates unique passwords and makes "click button" authentication easy, and you can back up your encrypted passwords on USB sticks, etc.

That's just Microsoft. Apple has had such a system for years (Keychain) that generates random passwords and stores them in an encrypted, systemwide database.

The way the password systems were designed to were stupid to begin with. Programmers designed password systems for people like themselves. The real issue is, programmers did not forsee the internet and the need for easy authentication at multiple sites with strong keys.

I still don't know why Microsoft and other OS makers have not bought out roboform to integrate it into their OS and change the culture over time.

http://www.roboform.com/

Roboform generates unique passwords and makes "click button" authentication easy, and you can back up your encrypted passwords on USB sticks, etc.

Because having unique passwords for every site makes it very different to use another computer at random. Storing on a USB stick is great, except when I want to log in from my iPhone and need to find some way to view that password. Or lose my USB stick and want to check my e-mail while in Russian on business. Simply put, it's terribly inconvenient for the average end user - the only way that they'd be willing to go along with it is if the passwords could be retrieved over the internet with a master password - which would give a single point of failure and be even less secure than the current system.

The way the password systems were designed to were stupid to begin with. Programmers designed password systems for people like themselves. The real issue is, programmers did not forsee the internet and the need for easy authentication at multiple sites with strong keys.

I still don't know why Microsoft and other OS makers have not bought out roboform to integrate it into their OS and change the culture over time.

http://www.roboform.com/

Roboform generates unique passwords and makes "click button" authentication easy, and you can back up your encrypted passwords on USB sticks, etc.

https://online.roboform.com/ http://www.roboform.com/pass2go.html

https://online.roboform.com/ http://www.roboform.com/pass2go.html

I use RoboForm. I have a master PW to protect all my passwords, it will auto-fill websites if I wish it to. (Preventing Keyloggers from being able to log the data)

It has a portable app so I can put it on a flashdrive.

I can copy the data to my netbook from my gaming machine.

It works great with IE, Maxthon, Chromium (the RF flavor of Chrome), and FireFox.

You can manually look up passwords, it has a PW generator, and a notes function to keep track of other important data.

Check it out: http://www.roboform.com/

The passwords are saved in files and are encrypted and you an password protect roboform so they can't access your passwords, after saving your passwords in roboform be sure to clear firefox or IE's saved passwords. Also get a USB stick and backup all you passwords, it's very easy to do. Then you can keep your master password to access editing the encrypted pass files as something you use all the time like your bank pin + some other word fudge factor you'll easiy remember

http://www.roboform.com/

"I agree completely. I generally tell people that it's far, far, far better to have a strong password which you write down than a weak one "

The real problem is that there needs to be password software like AI roboform installed NO ONE and I mean NO ONE wants to remember their password what they should have is a LOCAL password {on a local machine, i.e. AI roboform) which then they can press a button that types in a safe big ass randomized password which they can backup.

Let's be frank passwords are a pain in the ass.

http://www.roboform.com/

... AI roboform.

http://www.roboform.com/

Truth be told, the only way Open ID will gain traction is if someone like google takes it over or implements it (merges it) with google accounts. Something many people have already signed up for. This is what google did with other services they had going.

Personally I use disposable email sites like mailinator.com and Roboform to just register once, then save the password. Then all you do is have to click a button and you can backup your passwords and never have to worry about forgetting a password again.

http://www.roboform.com/

http://www.roboform.com/

"Which is worse: a password that you can remember, or changing passwords every 30/60/90 days to a new password such that you can never keep up, and thus need to write it down *somewhere*?"

What's needed is an automated kind of passkey that's universally accepted at all (important) sites, so you don't have to know your password and the app takes care of it for you. I've been thinking about this ever since I started using Roboform http://www.roboform.com/

This prevents one from needing to remember passwords but it does nothing for password changes, etc. The thing is that if the world was populated by the imaginary cool caring people, we wouldn't need security and to begin with. We need security because there are too many people who are assholes.

roboForm using GoodSync ... awesome

It also took me a while to figure out how to remove the close button from each tab. The tab scrolling "feature" was also a point of great annoyance that took up more of my time to find a fix.

In short I'm just not jumping for joy over FF. This new flaw happens to come to light the day after I search Google for a way to manually add userids and passwords to the FF DB (any ideas?). This was to address the problem of FF not picking up some text fields as userid and password fields. One solution I found was RoboForm, though I'm not sure I want to pay for what I think should be a fairly easy thing to do inside FF. FF is getting better but personally I'd rather be using Mozilla 1.7.x.

What you need is http://www.roboform.com/

These extensions also give the message: "Disabled, not compatible with Firefox 1.5"

• Add Bookmark Here 0.5.3
• AI Roboform Toolbar for Firefox 6.5.2
• Bookmark All 1.1.1
• Cookie Toggle 0.8.1
• CookieCuller 1.2.0
• FLST 0.8.3
• Gcache 0.2.1
• Greasemonkey 0.5.3
• MiniT+ 20050216.6
• Objection 0.2
• Permit Cookies 0.6
• Print It! 0.3.6
• Scribe 0.21
• SecurePassword Generator 0.5.2
• StumbleUpon 2.02
• Super DragAndGo 0.2.4
• SwitchProxy Tool 1.3.2
• xMirror 0.2

Wish I would have waited a couple of weeks before I upgraded.

"Change your passwords regularly. If that's too much trouble, rotate easy to remember (yet secure) passwords"

Better yet use Roboform's random password generator and save your passwords to encrypted key files, and back them up often, then you do not have to remember your passwords ever, just backup your keycards

Check out RoboForm. Snarfs up passwords, automatically enters them for you. Passwords can be saved to Palm, PocketPC, or USB key. Supports Firefox.

The password manager I recommend is RoboForm. It isn't free, but It has every feature I've ever wanted.
* Secure encryption
* Random Password Generator
* Storage of automatic logins
* Storage of "SafeNotes"
* Ability to fill forms with one button (CC entry, etc.)
* Storage of bookmarks (import from IE/Firefox)
* Storage of contacts (import from Outlook or file)
* Portable version that runs from a thumbdrive.
* Palm add-on

Quite nice.

...apparently only users with common passwords, like dictionary words, are affected...

Nowadays I generate strong passwords using Roboform, which also remembers and enters them for me. Comes with a Palm app that allows you to carry around passwords with you, and generate strong password when you're away from your computer.

But let me get to the key point on my post: show some respect. People are not lazy just because they lack memory skills. Or the patience to enter a 30-character password every time they access a secure web site. Fine, it works for you. Doesn't give you any moral superiority.

And I'll say it one more time: we need non-Password authentication. Means redoing our ID infrastructure, but we need to do that anyway.

I use a password vault called RoboForm from a company Siber Systems. It is Windows only :/ and has plugins for IE based and Mozilla based browsers (no Opera, sorry. :/). It also has a read only synchronization with your Palm or PocketPC PDA.

Most important, it has a portable version that will let you carry it around on a USB drive. You pop the USB drive into a computer and you have access to all your passwords.

It has a master password which you can use to selectively protect your login information and online purchasing information with a strong encryption.

You can also use it to keep your contact information and random notes all in one place. Again this is especially useful if you have more than one Windows box you use.

The free version has limited storage, the Pro version cost $30. Portable and PDA addons are $10, so you could easily spend $50 which might be a bit pricey for some people, but I am very happy with the functionality it provides me.

I have randomly generated passwords for all my logins, and any secure sites I have to enter my master password to access. If I unplug the USB drive, all my password information is gone from the host system automagically.

But seriously, does a policy like this do anything but encourace people to write down their passwords?

The problem here is not that the security people are stupid. It's just that they're trying to secure an authentication system that's obsolete and fundamentally flawed. It's past time to ditch password-based authentication. If I had to secure a big network, I'd get everybody smart cards. Essentially impossible to forge, and if they're stolen you can cancel them immediately. But the crucial detail with a physical authentication device is that when it's stolen, you know it's stolen -- not true with passwords.

Of course this is not a cheap solution. Which motivates security people to try patchwork solutions like this one, even though the "solutions" often make the problem worse.

Passwords, as evil as they are, will not go away any time soon. So I might as well mention the product that I use to generate and store passwords: RoboForm.

If you're talking about the Form Filling and password saving features of Gator, have you ever tried RoboForm?

If you've talking about the adware part of Gator, sorry can't help you there. :)

Try RoboForm. It's free to store less than 30 logins.

Well not that I've used it but I've heard AI Roboform is a nice alternative to Gator that doesn't have any annoying spyware embedded. It can import Gator's password files.

It's recommended as Pricelessware by alt.comp.freeware, which means no nasty spyware or adware.

I don't like to use the term spyware, I prefer the term "Crapware"

In my opinion, it's more accurately termed "crappy spyware with intrusive popups", but I can see why they'd want to call it "adware" instead.

RoboForm is much better and isn't adware, spyware, or anything similar. It even imports Gator's stored information, though I'm not sure why you'd need much of an incentive to move away from Gator.

(I'm not affiliated with Siber Systems, the maker of RoboForm, I'm just a *VERY* happy user.)

If you like Gator's features but hate the spyware part, why not try RoboForm? It's probably less likely to crash your system anyway.

Grab RoboForm instead. It's freeware and it doesn't have any ads nor does it contain spyware. It'll even let you import all your Gator passwords. There's absolutely no reason to keep using Gator.

When the site wants to get some data from the user, say the user's age or address, they don't query passport directly. What they do is redirect back to passport, passport generates a form with the values prefilled in. Then the user can edit those values, or just click submit, and the values are posted back to the original site.

Or you can just use the very cool (and free) RoboForm which sits in your toolbar and auto-fills forms that pop up in your browser (there are other form-fillers around but I haven't tried them).

This kind of software doesn't require you to submit your personal information to a centralised authority (it's stored on your PC), and you can keep multiple 'identities' and choose which to use to fill in a form. I keep 'complete', 'partial', and 'anonymous' identities which I use to decide how much (and how truthful) information I want to give to a site.