Slashdot Mirror
Poor Passwords A Worse Problem Than Poor Antivirus
dasButcher writes "Viruses and worms get all the headlines, but poor password management is a worse problem according to a new study by Channel Insider and CompTIA. As Larry Walsh writes in his Security Channel blog, VARs and security service providers say they find more problems with password management than antivirus applications when they do security assessments. While password problems are nothing new, Walsh and those posting on his blog correctly assert that users remain cavalier about passwords and businesses are doing too little to address this serious vulnerability."
Security and Windows is an oxymoron anyway. If you can hack away for months at any usable password you can crack it, even if it is fully random, eg 8^256 is small. First you must secure the authentication data.
If you want any real security use a SSL secured challenge-response that can only be effected by a a numbered card, and significant asymetric key, say 4096 bits, and you can implement the response device in software or a PIN protected card+calculator, (eg SWISS E-BANKING).