Slashdot Mirror


Millennials Value Speed Over Security, Says Survey (dailydot.com)

An anonymous reader quotes a report from The Daily Dot: Millennials stand apart from other Americans in preferring faster Internet access to safer Internet access, according to a new survey. When digital-authentication firm SecureAuth asked people from all age groups whether they would rather be safer online or browse faster online, 57 percent of Americans chose security and 43 percent chose speed. But among millennials, the results were almost reversed: 54 percent chose speed over security. Young people are also more willing than the overall population to share sensitive information over public Wi-Fi connections, which are notoriously insecure as they allow anyone on the network to analyze and intercept passing traffic. While a clear majority (57 percent) of Americans told SecureAuth that they transmitted such information over public Wi-Fi, nearly eight in 10 (78 percent) of millennials said they did so. A surprising 44 percent of millennials believe their data is generally safe from hackers, and millennials are more likely than members of other age groups to share account passwords with friends. Americans overall are paying more attention to some aspects of digital security. An October 2015 study by the wireless industry's trade group found that 61 percent of Americans use passwords on their smartphones and 58 percent use them on their tablets, compared to 50 percent and 48 percent, respectively, in 2012. The recent study lines up with a report published on May 24 that found that the elderly use more secure passwords than millennials.

77 of 143 comments (clear)

  1. "Millennials are stupid" by kheldan · · Score: 4, Insightful

    But of course that's obvious. They've also been indoctrinated by 'social media', the media in general, and corporations that sharing everything is normal, and that 'privacy' is something anomalous, and that only people with something to hide want privacy. The real question is: will they live long enough to learn the error of their ways, and even more to the point, will they learn that before they reproduce and pass on their indoctrinated ways to another generation?

    --
    Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
    1. Re:"Millennials are stupid" by The+New+Guy+2.0 · · Score: 2

      Millennials don't know what we didn't teach them... maybe Slashdot should write something teaching them what we've learned over the years.

    2. Re:"Millennials are stupid" by ShanghaiBill · · Score: 3, Insightful

      Millennials are only marginally stupider. 57% vs 46% is not a big difference. But it is a stupid poll anyway. Security rarely slows down the internet, because security happens at the endpoints, not during transmission.

    3. Re:"Millennials are stupid" by MobileTatsu-NJG · · Score: 1

      Today I learned that not having the same experience as an elder means 'stupid'.

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    4. Re:"Millennials are stupid" by Shoten · · Score: 4, Insightful

      The creator of the study is stupider than most millennials, I'd wager.

      Security vs. speed hasn't been a network trade-off for a very, very long time. They may as well have put out a study stating "Millennials Value Speed Over Getting Fucked in the Ass by Rebel Wilson."

      Ah, I hear it now..."But public WiFi is faster, and there's the trade-off!" Oh yeah? What public WiFi would that be? None of the ones I've ever used in the past few years were fast at all, because the same openness that makes them non-private also means that tons of people are sharing the bandwidth.

      --

      For your security, this post has been encrypted with ROT-13, twice.
    5. Re:"Millennials are stupid" by fahrbot-bot · · Score: 4, Insightful

      Millennials don't know what we didn't teach them... maybe Slashdot should write something teaching them what we've learned over the years.

      Ya, because old people trying to teach young people (who, like, seriously guys, know *everything*) always goes over so well :-)

      Now if they'd just get off my fucking lawn - 'cause I'm trying to mow it ...

      --
      It must have been something you assimilated. . . .
    6. Re:"Millennials are stupid" by Anonymous Coward · · Score: 5, Interesting

      o please, cut the crap. This "millennials are stupid" thing has to stop. They are just younger, therefor have less experience with in how many ways things can go belly up, and as a group they therefor have a rosier picture than older people. That is nothing new. Our generation was, on average, incredibly naive as well. We are the generation that got duped by Microsoft's antics and essentially allowed Microsoft's bad (design) decisions to become defacto standards, even though the signs were very clear. The world still suffers for it.

      Face it, we are ALL far to gullible for our own good when it concerns the high-paced technology and societal changes we are going through. And most of us simply don't learn new things fast enough to know any better while growing older either.

    7. Re: "Millennials are stupid" by Anonymous Coward · · Score: 1

      It was faggots like you who decided using social security numbers as identification was a good thing. Don't try to claim any sort of high ground here. Idiot.

    8. Re:"Millennials are stupid" by Opportunist · · Score: 4, Informative

      I'd rather think the train of thought is "Make it fast. Leave the make-it-safe part to me".

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    9. Re:"Millennials are stupid" by mmell · · Score: 1
      Boy, I hope you never need a blood transfusion.

      Just sayin'.

    10. Re:"Millennials are stupid" by kheldan · · Score: 4, Insightful

      LOL, no.

      'Inexperienced' = 'Isn't aware of/understand X', 'Gets X explained to them', 'Has an AHA! moment, is grateful for new learning/knowledge'.

      'Stupid' = 'Isn't aware of/understand X', 'Gets X explained to them', 'Gives you a funny look, mocks you, says you are just too old, don't understand how things are today, etc, ignores new knowledge/learning'

      --
      Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
    11. Re:"Millennials are stupid" by swb · · Score: 1

      I'm sure they've also grown up in an environment where every fucking thing has a password and many things have grown more hostile to crappy passwords or not allowing saved passwords.

      Yet at the same time, there's this constant sense that those passwords don't matter, as some other vulnerability in a browser, an operating system or some other link in the chain has rendered those passwords essentially useless. And Snowden, too.

      So maybe they've just gotten to the point where they see through it as some kind of TSA-like security theater, where you enter 37 passwords every time you turn around, yet none of it fucking matters because your credit card number still gets stolen.

      It's almost like they're kind of right, but for the wrong reasons.

    12. Re:"Millennials are stupid" by MobileTatsu-NJG · · Score: 1

      So you're saying you listened to everything your parents said and never made any mistakes, right?

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    13. Re:"Millennials are stupid" by exomondo · · Score: 1

      So where in this poll is that distinction made? I'm sure many people aren't aware of the necessity for internet security, particularly those that didn't grow up going through the phase of paranoia about the security of internet shopping in the early days of the net.

    14. Re:"Millennials are stupid" by ClickOnThis · · Score: 4, Insightful

      The children now love luxury. They have bad manners, contempt for authority; they show disrespect for elders and love chatter in place of exercise.
      -- Socrates

      --
      If it weren't for deadlines, nothing would be late.
    15. Re: "Millennials are stupid" by VikingNation · · Score: 1

      It was faggots like you who decided using social security numbers as identification was a good thing. Don't try to claim any sort of high ground here. Idiot.

      Can you suggest another mechanism to enable identification of an individual without using a social security number, national identifier, passport number? Someone calling a company, government, etc. and claiming they are the person because they can verbally say three word (John James Doe) is not going to work.

    16. Re:"Millennials are stupid" by viperidaenz · · Score: 5, Insightful

      “When I was a boy of 14, my father was so ignorant I could hardly stand to have the old man around. But when I got to be 21, I was astonished at how much the old man had learned in seven years.”

    17. Re:"Millennials are stupid" by chispito · · Score: 3, Interesting

      The simplest explanation is that they have nothing to secure. That is, they have nothing to lose yet: Savings, Job, Credit, etc.

      --
      The Daddy casts sleep on the Baby. The Baby resists!
    18. Re:"Millennials are stupid" by Kjella · · Score: 3, Insightful

      But of course that's obvious. They've also been indoctrinated by 'social media', the media in general, and corporations that sharing everything is normal, and that 'privacy' is something anomalous, and that only people with something to hide want privacy. The real question is: will they live long enough to learn the error of their ways, and even more to the point, will they learn that before they reproduce and pass on their indoctrinated ways to another generation?

      Not to rain on your parade but privacy is a choice. Not everybody wants it, not everybody needs it. I don't know if you remember JenniCam? From 1996 to 2003 she broadcast pretty much her whole life on the Internet right down to having sex. Not that it was a porn cam or anything, it was just everything and at the height it had 3-4 million viewers daily. Now that's a rather extreme example, but I know at least one that I'd call hyperactive on social media. I think he loves every moment of it. Near as I can tell he's networking well both in the business and pleasure department, yes Zuckerberg probably has a file on him thick enough to give Gestapo multi-orgasms but so far I can't really see any huge negative consequences from it.

      Now I couldn't do it, I'm probably the polar opposite because quite frankly I feel my life is none of your business. And I don't feel a need to keep all the people who aren't there updated on where I am or what I'm doing. Like if I go to a concert, I'll just be at the concert I won't be a damn livestream to everyone else who's not there. It's not that I couldn't post most of it online because it's just boring everyday life same as everyone else but I don't feel like sharing. Which means I don't particularly like it when I'm tagged and checked in and whatnot by other people, but it's a compromise. You say it like privacy is a truth they should learn, I'm thinking it's more of a choice. And as long as the choice isn't being made for me....

      --
      Live today, because you never know what tomorrow brings
    19. Re:"Millennials are stupid" by PinkyGigglebrain · · Score: 2

      Yeah, and look what eventually happened to the Athenian Empire. :D

    20. Re:"Millennials are stupid" by ClickOnThis · · Score: 1

      Yeah, and look what eventually happened to the Athenian Empire. :D

      What's your point?

      Eventually, all empires fall.

      --
      If it weren't for deadlines, nothing would be late.
    21. Re: "Millennials are stupid" by Imrik · · Score: 1

      The problem is that SSN is frequently used as both a username and password.

    22. Re:"Millennials are stupid" by Imrik · · Score: 1

      Public WiFi is faster than going home and doing things on a secure wired connection.

    23. Re:"Millennials are stupid" by painandgreed · · Score: 3, Interesting

      Yeah, and look what eventually happened to the Athenian Empire. :D

      They became the model of Hellenistic culture as we understand it while other city states such as Sparta are largely only known of via Athenian authors?

    24. Re:"Millennials are stupid" by kheldan · · Score: 1

      Kettle here;

      Pot, why are you calling me black? XD XD XD

      --
      Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
    25. Re:"Millennials are stupid" by kheldan · · Score: 1

      I'm sure the government could care less what I post about on Facebook

      But everything you post on Facebook is being used to create a profile of you that can be used to predict your every action and track your whereabouts with very high accuracy, don't you even care?

      You're just being paranoid, nobody actually does that!

      That's how that particular discussion usually goes.

      --
      Are YOU using the TOOL, or is the TOOL using YOU? Think about it!
    26. Re: "Millennials are stupid" by toddestan · · Score: 1

      The SSN is a pretty good unique identifier. The problem is assuming that it's a secret, and someone claiming to be John James Doe that also can rattle off John James Doe's SSN must actually be John James Doe.

    27. Re: "Millennials are stupid" by VikingNation · · Score: 1

      Good point. In the past the computers were much more secure and less connected. Now poor security and more connections have resulted in eroding the security. Hence - there are changes that SSNs can be stolen.

    28. Re: "Millennials are stupid" by VikingNation · · Score: 1

      Good point. It is used on a lot of health care an government sites at some point. They should not be allowed to be used for login accounts or passwords.

    29. Re:"Millennials are stupid" by Rakarra · · Score: 1

      Public WiFi is faster than going home and doing things on a secure wired connection.

      I think the distinction is that Public WiFi is usually not faster, and is often orders of magnitude slower, and worse, more prone to service dropouts than your carrier's 4G.

    30. Re:"Millennials are stupid" by exomondo · · Score: 1

      I'd certainly like to see the sort of Facebook page that contains data enabling anybody to create a profile that can be used to "predict your every action and track your whereabouts with very high accuracy", most that I see are photos of parties, pets, food and sharing cat videos but an example of what you're talking about would really help the discussion. In terms of "predict your every action" that's just plain wrong, particularly when they can't even get targeted advertising remotely close to accurate. As far as tracking your whereabouts, that has been true ever since people started carrying cell phones, still a lot of older people are pretty ignorant of that fact.

      But regardless of that, it still doesn't explain where you get the idea that all the polled people fall into the "stupid" category rather than the "inexperienced" category outside of your "kids these days" anecdote.

  2. Who wrote this? by The+New+Guy+2.0 · · Score: 1

    Are parents not teaching their children about VPN? SlashdotDeals is offering discount VPN packages from several vendors, and that solves the insecure WiFi problems.

    1. Re:Who wrote this? by Sax+Russell+5449D29A · · Score: 2

      It's pointless to teach about (rather important) stuff like VPNs if the recipient isn't willing to listen. It's best to teach values rather than technologies since technologies usually follow values. If you value privacy, you do whatever you can or is practical to enhance and protect your privacy.

      --
      -SR
  3. no surprise by jofas · · Score: 1

    Of course they do. "stop and think" is not taught in schools anymore (if it ever was). The only reason my kids aren't getting their PCs owned every 2 months is because they're sitting behind pfsense and the file server is virus scanned daily. I can't even imagine what millenials do when their stuff doesn't work any more.... oh wait, I do:
    "Meh. I'll just buy another one."

    1. Re:no surprise by ShanghaiBill · · Score: 1

      "stop and think" is not taught in schools anymore (if it ever was).

      It never was. There is no evidence that people were smarter in the past. By most measures, kids are smarter today than ever before. Surveys like TFA are poor measures of dumbness because they are comparing young people to older people who have learned more of life's lessons. A more meaningful comparison would be to compare young people today to how dumb we were when we were young (in my case, pretty dumb).

  4. Happy 13th Birthday, here's the manual to computer by The+New+Guy+2.0 · · Score: 2

    COPPA doesn't work very well... kids need education as to what they can do online, they need to know the rules about oversharing when they get started. They should be shown e-mail and texting to people they already know before they learn to publish. Dr. Spock didn't know about this problem in time to write about it.

  5. YOLO by Khashishi · · Score: 1

    Tell me, every time you wait in line for TSA anal probing, don't you prefer speed over security?

    1. Re:YOLO by Austerity+Empowers · · Score: 1

      TSA offers neither speed nor security.

    2. Re:YOLO by Tablizer · · Score: 1

      TSA offers neither speed nor security.

      Their security "works" because terrorists don't have the patience to wait in line, and attack mental clinics instead.

  6. Define Security by Hydrian · · Score: 1

    What type of Security are you talking about? If the security comes in the form boot locking and signed code at the cost of removing fair use, I'd be against it too.

    --
    No good deed goes unpunished.
    1. Re:Define Security by rocqua · · Score: 1

      There is also the simple matter of diminishing returns. At 99,99% security, extra security matter a lot less than at 90%.

  7. Boiling frogs by ronmon · · Score: 4, Insightful

    Yes, it really is that simple. They have no reference to the expectation of privacy and freedom. The surveillance state is normal to them.

    1. Re:Boiling frogs by huge · · Score: 1

      You could also take the opposite spin on this: There is no secure internet access to begin with so why wouldn't you choose faster connection over more secure, but still compromised connection? Use SSL, TLS, SSH and the like where you need to be secure and assume that everything else is compromised. Why would one assume that their ISP is secure? Always assume that somebody is eavesdropping the connection, or running an active MITM against you, and consider if your mitigation actions are sufficient?

      Would I consider TLS with SHA-1 to be sufficient for accessing Slashdot over potentially compromised network? Yes. In worst case my Slashdot account would be compromised, no big deal.

      Would I consider the same to be sufficient for the company payment interface? No, I wouldn't.

      --
      -- Reality checks don't bounce.
    2. Re:Boiling frogs by thegarbz · · Score: 1

      Or maybe there's the reality that we've always been in some form of surveillance state and that they find the responsibility for safety and security rests with themselves.

      I too would have responded speed to this survey. That doesn't mean I don't value security or privacy, but rather that you make it fast and monitor / attack it all you want. I'll work on making my end secure.

  8. More clickbait by PCM2 · · Score: 1

    They're trying to position this as a generational thing, like the upcoming generation is going to behave some way that's completely different than all previous ones.

    What if it has nothing to do with being a "Millennial"? What if it's just about being young and stupid (or if you prefer, inexperienced)? But I guess that wouldn't play to the gender gap dollar. "Huge. Huge in times of recession. Giant market..."

    --
    Breakfast served all day!
  9. Public Wifi no more or less secure by QuasiEvil · · Score: 3, Insightful

    [quote]to share sensitive information over public Wi-Fi connections, which are notoriously insecure[/quote]

    I've never understood this whole idea - anything sensitive should be going over an encrypted connection anyway. Who cares if some idiot sitting next to me in the coffee shop can sniff it? He can't make heads or tails of it anyway. In the case of a MITM attack set up in the wireless gateway, the certificate validation / host key / other host validation protocols should fail. Adding a VPN connection adds layers of defence, but something that's highly unnecessary for most individuals and data.

    Otherwise, I'm probably just browsing sites that don't require logins or any other information from me - in which case, again, there's nothing secret or proprietary there and I don't care if I get sniffed.

    1. Re:Public Wifi no more or less secure by dgatwood · · Score: 1

      A MITM is also in the perfect position for an attack on your device. A single specially crafted media file injected into an unencrypted web site that you're browsing over the coffee shop wifi is sufficient to take over your phone. The WPA-PSK encryption does not protect you from that.

      See that bold part? That's the problem. Unencrypted web sites shouldn't even exist anymore. Even all of my minor personal sites are all encrypted, with the sole exception of one site hosted by DreamHost using CloudFlare, and only then because CloudFlare has not yet made it possible to use TLS in conjunction with hosting partner accounts. [Redacted swearing]

      Basically, there are a handful of infrastructure companies that are holdouts. As soon as those few companies get their act together, the only valid reason to use unencrypted HTTP will be for intranet sites provided via multicast DNS (because .local domains aren't eligible for TLS certs), and even then only because it is too much hassle to set up an entire PKI and install internal-network-specific root certs unless you're a big business. At that point, IMO, going to a non-encrypted site ought to pop up a browser warning, with the default being "Cancel". We're basically at that point now.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    2. Re:Public Wifi no more or less secure by dbIII · · Score: 1

      Unencrypted web sites shouldn't even exist anymore.

      WTF?
      I'd say fix the browsers that can't deal with a transition instead of completely fucking up every form of caching that isn't a deliberate Man In The Middle attack. Local news, weather, entertainment - if there is nothing secret in the communications then why apply the extra overhead? Sure, you want to keep your bookface stuff secret from everyone but your friends, the hosters, their advertisers, law enforcement and anyone they can make a buck selling your traffic information to, but non-interactive stuff does not need the overhead and the history of what hosts you visit is all available anyway even if the content is encrypted. People can still build up a profile on you based on the URLs you ask for without the content.
      Trying to hide all content is not going to give you the privacy you seem to think you will be getting.

    3. Re:Public Wifi no more or less secure by dgatwood · · Score: 1

      I'd say fix the browsers that can't deal with a transition instead of completely fucking up every form of caching that isn't a deliberate Man In The Middle attack. Local news, weather, entertainment - if there is nothing secret in the communications then why apply the extra overhead?

      Because you, as the content provider, have no way to know whether exposing that communication can negatively impact the privacy of the person retrieving it. Even seemingly innocuous communications can reveal things that might raise privacy issues. And when you can amass enough of those innocuous communications, you can often conclude things that qualify as serious privacy invasions.

      For example, suppose I'm in California and I look up the weather in Tennessee. This might tell you:

      • I have family in Tennessee
      • I'm about to go on vacation to Tennessee and want to know what clothes to bring

      Either of these pieces of information is probably harmless by itself, but when combined with other information (e.g. my home address, knowledge of some sort of natural disaster in Tennessee, etc.), either could potentially make me vulnerable to various forms of victimization.

      People can still build up a profile on you based on the URLs you ask for without the content.

      The companies running the sites can. There's a big difference between Facebook knowing I'm about to go on vacation and the seedy-looking guy across the coffee shop who happens to own a moving truck knowing that I'm about to go on vacation. I don't trust Facebook completely, but I don't trust the random guy with the unmarked, plateless moving truck at all.

      All traffic should be end-to-end encrypted, period, unless there is no way to do so. Anything less means that A. you can't trust that the content wasn't altered in transit, and B. you have to assume that everybody near you knows exactly what you are doing. IMO, even if the only benefit were preventing MitM attacks, it would still be worth the minimal overhead to use TLS everywhere. The additional privacy edge cases are just a nice bonus.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    4. Re:Public Wifi no more or less secure by dbIII · · Score: 1

      Even seemingly innocuous communications can reveal things that might raise privacy issues.

      I addressed that above. Please try again after you have read my comment. You even managed to QUOTE the relevant portion apparently without reading it, but drew some weird conclusions about how it's perfectly safe if your upstream network provider knows everything in one instance but not another. Inconsistent.

      All traffic should be end-to-end encrypted, period

      Maybe you should consider implications before coming up with an empty slogan about putting burdens on others just to solve a problem that is not universal and can be solved in other ways.

    5. Re:Public Wifi no more or less secure by dgatwood · · Score: 1

      I addressed that above. Please try again after you have read my comment. You even managed to QUOTE the relevant portion apparently without reading it, but drew some weird conclusions about how it's perfectly safe if your upstream network provider knows everything in one instance but not another. Inconsistent.

      I never said it was safe for your upstream network provider to know everything. I said it was moderately safe for the other endpoint to know everything—the content provider, not the service provider. It's at least moderately safe for advertisers to know everything by virtue of having access to info from multiple sites. It isn't particularly safe to allow anybody who has access to a shared public network to know everything about your traffic.

      Maybe you should consider implications before coming up with an empty slogan about putting burdens on others just to solve a problem that is not universal and can be solved in other ways.

      No, it really can't be solved in other ways. Data on its way to and from the server is either encrypted or it is wide open to anybody who can sniff your traffic. Everyone, at one time or another, uses the Internet in ways that would be detrimental to their safety if the wrong people discovered that usage, such as a potential burglar realizing that you're about to be away from home. The average user is way, way, way too clueless about Internet security to recognize those situations and take steps to protect themselves. Therefore, the burden must fall on everyone who runs a server to protect the general public from their complete lack of understanding by making all content requests secure by default.

      And no, caching is not a good reason to break transport security. It is relatively rare for caching to provide big benefits except at large ISPs or college campuses with huge numbers of users. And even then, the benefits mainly come from caching content from big video providers like YouTube or Netflix, both of which have specifically designed their infrastructure to allow ISPs to cache the content on a trusted local server without having to intercept requests, and they make those caching servers available precisely for that reason.

      Caching should die already. It was always a cheap hack to work around crappy networks, and it never worked well. HTTPS just adds one more reason to stop doing that nonsense.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    6. Re:Public Wifi no more or less secure by dbIII · · Score: 1

      relatively rare for caching to provide big benefits except at large ISPs

      One guess as to who is upstream from every-fucking-body. Didn't think too hard about the issue did you?


      One unintended consequence of moving to https for traffic that doesn't need to be secure is that proliferation of MITM https traffic sniffing boxes at what seems to be just about every large or mid-sized corporation. Utter madness, accidents waiting to happen and teaching users to accept any request for a cert. In a lot of cases it's making things worse and not better. I'm hoping for a major breach and a bank taking one of those MITM box providers and whoever deployed it to court with a lot of press attention before everyone's secure traffic ends up as insecure as everything else.

    7. Re:Public Wifi no more or less secure by dbIII · · Score: 1

      See this article today for an example of what your "https only" suggestion is resulting in and why it is not as useful as you think it is:
      https://yro.slashdot.org/story/16/05/28/1335247/controversial-surveillance-firm-blue-coat-was-granted-a-powerful-encryption-certificate

    8. Re:Public Wifi no more or less secure by Rakarra · · Score: 1

      Not the original user, but it seems to me that there is really only one good use for caching anymore -- video. Every other website I've seen in the last several years is entirely dynamically generated and personalized and cannot be cached. You can't even cache Netflix and other large video providers due to piracy concerns, they have to do the actual caching at ISPs that let them in.

      That, and no one outside of my bank, even Slashdot, seems capable of putting together an https website that doesn't trip the security alarms of every web browser. Whether it's self-signed certificates, expired certificates, or certs that aren't valid because a server changed hosts or whatnot, big or small, https is broken everywhere. I'm not sure if making it mandatory would really fix the problem.

  10. weigh the risk = speed by supernova87a · · Score: 1

    The reason is that the ways that typical security are applied = actually insecure and less effective (for the user).

    Take for example, a very common password requirement at Chase bank: They require that passwords be >8 characters, have a !@#$@# special character, numbers, capital letters, etc.

    And.. if you forget your password, it cannot be reset to the same as any of your last 5 old passwords. Even if the last passwords were reset voluntarily due to forgetting.

    So when I, with already a relatively good memory for passwords, forget my nonsensical password that matches no other password at Chase, I cannot reset it to something I can even temporarily remember as my past password because that is not allowed.

    That leads to me into this neverending password hell of constantly rotating passwords and resets that make me feel like I have less access to my account and less ability to monitor what's going on.

    I much prefer the slightly less secure but easier to remember passwords with no such restrictions when I have to reset it due to forgetfulness. This is a ridiculous state of affairs.

    1. Re:weigh the risk = speed by techno-vampire · · Score: 1

      I learned decades ago that the more vulgar your password is the easier it is to remember. When I worked for an (unnamed) ISP, they decided that it was a Good Idea to make all of our internal passwords (only valid for on-site connections) expire every 60 days, probably because somebody discovered that they could do it and conflated "could" and "should." At one point, my password there was FuC|y0U! Then, I had trouble with it and had to give it to my lead to see if she could make it work. She was quite amused by it, and even more so by my explanation of why I'd picked it.

      --
      Good, inexpensive web hosting
  11. Re:Devil's advocate... why does it matter? by thinkwaitfast · · Score: 1

    Computers are cheap now, close to free if you look enough. None of my computers that have anything remotely valuable have internet access. That should be secure enough.

  12. Re:Happy 13th Birthday, here's the manual to compu by ShanghaiBill · · Score: 1

    COPPA doesn't work very well.

    COPPA doesn't apply to millennials. Millennials are people that came of age around the year 2000, so they are adults now. COPPA applies to kids under the age of 13. In much of the English speaking world, a zero is referred to as "naught", so these kids born during the 00 decade are called "naughties".

  13. Re:privacy is stupid by whoozwah · · Score: 1

    Freedom to me isn't trying to fit in with my peers and posting nudie pics online because its the new normal in your hypothetical world; it would be being free to choose for myself what I want other people to know about me. I think it is far more advantageous for me to control other people's opinion of me insofar as I only give people information I care to give them. This allows me to be less anchored by other people's thoughts about who they think I am. It is very important to remember that nobody knows who anyone else really is. We only have facsimiles created in our minds built on incomplete information with the blanks filled in with assumptions.

  14. We're all "stupid" when we're younger by ClickOnThis · · Score: 3, Interesting

    This is not about millennials vs. non-millennials. This is about younger vs. older, in any era.

    When we're younger, we're more impatient, more reckless, take more risks, etc. Suffering from the consequences of poor choices helps us to make better ones in the future.

    --
    If it weren't for deadlines, nothing would be late.
  15. First article I've seen in a while.. by subk · · Score: 1

    ..That didn't get one single comment above 2

    --
    Now, if you'll excuse me, I have backups to corrupt.
  16. This from the generations that sent... by Nutria · · Score: 1

    BILLIONS UPON BILLIONS of dollars to Microsoft because they treasure convenience over security.

    Makes me want to barf.

    --
    "I don't know, therefore Aliens" Wafflebox1
  17. Re:That's because they're morons. by Anonymous Coward · · Score: 1

    If you think any of these companies you're putting your trust (and your data) in are your "friend", you've been misled and/or are delusional.

    Yes, misled by the generations before them. Those who were so braindead as to consider internet security as an afterthought in its design (favoring speed over encryption), that created "the cloud", that insisted on the use of webmail, that favoured proprietary spyware like Flash over open standards (because they were too slow to create a capable open standard), that capitulated to a proprietary desktop OS monopoly and that have run spying programs that exploited all of this. You handed them a fucked up system that you created.

    This is not the fault of one generation, many of them are likely to get burned and this is a combination of thier ignorance and your incompetence and short-sightedness.

  18. Millennials don't have a lot of money in the bank by serialband · · Score: 1

    They don't have anything substantial to protect yet. Of course they don't care. When you get older, you've (hopefully) accumulated some financial reserves that need to be protected. If you're still young, you typically won't have too much to protect.

  19. Insecure does not mean hacked by holophrastic · · Score: 1

    Trusting that a network has been built securely is totally different than trusting that no one is [currently] hacking your public wifi. That's just trusting the people around you.

    Once again, this whole focus on digital-needs-to-be-secure-otherwise-it-fails is remarkably inconsistent with the windows in my house being made of glass, my car doors being accessible to any locksmith, and the yellow painted line on the highway that keeps high-speed traffic from colliding with other high-speed traffic -- and pedestrians.

    Choosing to trust that the persons around you aren't criminals is a good thing for society. My doors are often unlocked. Sometimes I leave my garage door wide open. I drive a convertible, and leave it parked, top-down. And there ain't nothin' stopping anyone from throwing a handful of dandylion seeds into my lawn.

    Most of my neighbours have keys to my house -- so they can quickly help me if I need them. I trust that they won't steal my family jewels.

    Digital doesn't need to be perfectly secure. It merely needs to be as secure as we choose to need it to be. Judging by everything else in life, that just ain't very secure at all.

    Your local jewelry store, for example. Smash the display case, grab the real diamonds (not the fake ones) and run. The front door has a cage to stop you. But there's literally a back door to almost every one of those "secure" stores that has nothing at all to stop you.

    It's never been about stopping the criminal. It's always been about making the line very obvious. I don't worry about my car being stolen because it isn't something that anyone's going to do by accident -- grant theft auto is a very big deal. That's all digital needs -- a proper legal system to make illegal things easily prosecutable.

    In other words, it's all about the deterrent. Works in the animal kingdom too: no armour is thick enough, no claw sharp enough, to make the fight recreational.

  20. Dunning Kruger by ilsaloving · · Score: 1

    This survey has Dunning Kruger written all over it. These "millennials" haven't yet run into a situation where lack of security bites them in the ass, therefore there is no problem.

    This is no different than older people who are anti-vaxxers because they don't believe things like Polio or Measles are a threat, only to change their tune once their precious baby dies or is disabled for life by something that could have been trivially avoided. Or the billion other examples of people who don't take basic precautions or make the effort to learn about this, that, or the other thing.

    It all boils down to the fact that people don't know what they don't know, combined with the hubris of thinking that just cause they haven't experienced something, it doesn't exist.

    Oh, and then for icing on the cake, throw in the general "My ignorance is as good as your knowledge" attitude prevalent in North America (and presumably other countries), and well... some people just have to learn the hard way.

  21. Re: That's because they're morons. by Chas · · Score: 1

    I wish I could think like this.

    But I'm a realist.

    There's always going to be some asshole out there trying to impose their will(s) on everyone else and make the world over to their liking.

    That's why stuff like this will ALWAYS be needed.

    --


    Chas - The one, the only.
    THANK GOD!!!
  22. Networks never can be secure by Casandro · · Score: 1

    A network will always be able to mess with your data. Trusting in the security of a network is stupid. It used to be a theoretical threat, but now we know that organizations like the NSA sniff everything they get.

    The Internet has taught us that we must always use end-to-end encryption. That's why, unlike the phone network, a big percentage of data is secure. The phone network is one of those networks that are considered to be "secure". In reality it's very likely that most phone calls, and particularly their "metadata", will be recorded. In fact many phone companies record the "metadata" in order to be able to send you a bill.

  23. Re:Why choose? by Imrik · · Score: 1

    Secure connections are generally location dependent. If you're not at that location, its a lot faster to use the connection you have where you are.

  24. The irony is strong with this one by RogueWarrior65 · · Score: 1

    Oh the irony of all the "millennials are stupid" comments combined with their penchant for voting for Bernie Sanders.

  25. Re:"all empires fall" by ClickOnThis · · Score: 1

    No, Pinky Gigglebrain's response to my Socrates quote was pointless. What does the generation gap have to do with the fall of empires?

    Some empires last for a year or two, others for over a thousand years. And everything in between. The Athenian empire had a run of about 70-ish years.

    Empires fall because of political and social factors, not because the next generation gets tired of them.

    --
    If it weren't for deadlines, nothing would be late.
  26. What data cap? by WillAffleckUW · · Score: 1

    Look, we all know FB and the NSA are tracking us, and it's built in to the code of the apps we use, and even the chipsets on our phones.

    We're not stupid.

    Now give us 100 GB/sec like we can get on almost any US university campus and nobody will get hurt.

    --
    -- Tigger warning: This post may contain tiggers! --
  27. This result isn't surprising... by Lodragandraoidh · · Score: 1

    Millennials are just starting in the workforce so they have much less to lose if they do get compromised. That also means that whatever setback occurs can be quickly recovered. While I can understand why they may not care now about exposure of their content and information today - that isn't to say that will be a constant throughout their lives.

    Ask them the same question in 10 to 20 years and see what they say. If they have significant savings or other holdings that are compromised that took many years to acquire - or their credit gets trashed - you can bet they will change their answer. There may be edge cases - but the vast majority will have families, mortgages, and other issues that disruption through faulty security will be unacceptable.

    Polls like this are of limited value unless you can look beyond the poll itself to what is really behind how people are responding. Don't fall for the hype. Be a critical thinker.

    --

    Lodragan Draoidh
    The more you explain it, the more I don't understand it. - Mark Twain
  28. Re:Devil's advocate... why does it matter? by mattventura · · Score: 1

    Because it's a matter of making it not worth the criminal's time. A big company might get hacked no matter what security they have, simply due to the value in targeting them. An average person, on the other hand, simply has to not be the low-hanging fruit.

  29. Re: That's because they're morons. by Rakarra · · Score: 1

    We will always need privacy. We will always be different from each other, and we will always persecute people who have different values because we feel they are inferior. This is human nature. It's not going to change, tribalism is encoded into our genetic makeup, just as wolves banding together in packs is part of their makeup. Privacy will always be necessary because there will always be religion, there will always be conservatism and liberalism, there will always be differences.

  30. Re:So a world without "social justice"? by Rakarra · · Score: 1

    Just look at how "social justice" supporters savagely attacked Brendan Eich just because he supported traditional marriage

    Funny how you mentioned this, on the other side against your argument, it's the folks that Brendan Eich has fought against who had the most to lose from a loss of privacy. Until very recently, a full loss of personal privacy would also mean a loss of their lives.

  31. Re:That's because they're morons. by Rakarra · · Score: 1

    If you think any of these companies you're putting your trust (and your data) in are your "friend", you've been misled and/or are delusional.

    Yes, misled by the generations before them. Those who were so braindead as to consider internet security as an afterthought in its design (favoring speed over encryption), that created "the cloud", that insisted on the use of webmail, that favoured proprietary spyware like Flash over open standards (because they were too slow to create a capable open standard), that capitulated to a proprietary desktop OS monopoly and that have run spying programs that exploited all of this. You handed them a fucked up system that you created.

    The problem is, there were always good reasons to do the above.

    Webmail came about for many reasons, one being that it was not tied to a capricious ISP that could cancel your email at time. Move, get another ISP, you don't have to change the address that you used to sign up to web sites. It also worked great for "burner" email addresses so you didn't have to give a service your own personal email. And finally, those webmail services, gmail in particular, have far far better spam filtering and sorting than any email client, and any ISP. Email would have died entirely due to the spam problem if it weren't for the webmail services.

    Speed over encryption? Especially earlier, encryption wasn't even a possibility. When you're talking about 10-to-1 speedup of encryption versus non-encryption, then unless you're dealing with sensitive financial documents, encryption isn't a realistic possibility.

    "that favoured proprietary spyware like Flash over open standards." Yup, Flash happened for a reason, one of which being that the "open" video standards were terrible, and most of the ones that called themselves open were patent-encumbered. Therefore, you couldn't have a totally open standard. You needed a standard that had the player as part of it, because asking everyone to download an addon is nonsense. HTML5 is replacing Flash for video, and that has come with even worse problems -- it's far far harder to block HTML5 video, for one.

    And why did MS grow so big? Mostly developers and users were sick of the "10 different operating systems and platforms" situation we have in the early 1980s. Can you imagine a AAA game studio today developing one enormous game and porting it to the TI/994a, C64, C128, Amiga, Atari 800, Atari 400, Vic 20, IBM PC, Apple IIc and Apple II GS, and Tandy PC? I'm sure I'm missing a number of others, but over time, someone had to win. Most people don't want to spend hours and hours and hours and hours learning about their computer, much as you might not want to spend the same amount of time learning about your car's ICE or stock trading, or urban planning (unless that's your job). They want a computer as a dumb tool, something that launches the applications they want.

    We have a bunch of bad situations, but for the most part they got the way they are because they were the best option most people had available to them at the time, and because inertia is hard to fight against.