Slashdot Mirror
Are Usability & Security Opposites in Computing?
krozinov writes "Instinct tells us that computer security and computer usability are inversely proportional to each other. In other words, the tougher and stricter the security is, the less usability there is, and vice versa. However, there have been plenty of cases where both computer security and computer usability went hand in hand with each other and actually improved together. In the last few years security has been the biggest buzzword in computer systems and as such has become part of our computer systems. Before that, computer systems were all about getting it done faster and easier, but now they must also do it securely. Can the two continue growing together? This paper argues that it can, as evident by the most recent Indian Assembly Election."
Most applications manage being both unusable and insecure just fine.
I especially like the policies where your account is locked for something like 30 minutes on N bad password attempts. I like trying to guess what the boss's password is right before a high-level critical presentation. For some reason administrator account doesn't ever get locked though; that's too bad huh?
We mac users have the best of both worlds.
I hate sigs.
Isn't people entering through the Windows the main problem?
Good security fosters good usability, and good usability fosters good security. When either is considered a-holistically, it results in a detrimental relationship to the other. We all need to learn how not to think like a-holes.
You see? You see? Your stupid minds! Stupid! Stupid!
I, myself, developed a secret technology that would generate passwords that are mathematically proven to be very difficult to "crack" yet are exceptionally easy for the user to remember.
I based the approach on the proven techniques of phrenology, which allows me to map out certain neural pathways for each user. Based on this, I use an obsure corrolary to the Prime Number Theory to generate a secure password. I then run several tests to make sure the password isn't *too* secure to ensure it's not break-able by someone picking the hardest password.
Sure, it's a little time consuming, but the payoffs are incredible! By the time I'm done, not only can I generate a secure password that is easy for the user to remember, but I also know which resources to allow them access to!
I would, of course, share my technique, but then it wouldn't be as secure for me... I suppose, however, if I were to share it, I wouldn't be laughed at for making rediculous claims that are totally unsupported.
--LWM