[Discuss] Passwords

Daniel M German dmgerman at uvic.ca
Thu Aug 2 12:33:55 PDT 2007


 Adam Parkin twisted the bytes to say:

 Adam> Good advice, and one more piece of free advice: if you're like me and
 Adam> can't remember a gazillion different passwords, come up with a scheme
 Adam> for generating them.  One possible scheme is to insert letters from
 Adam> the service the password is to be used for into your "standard"
 Adam> password. For example, lets say your normal password is "helloWorld",
 Adam> and you want a "secure" password for your Gmail account, then you
 Adam> might use something like:

 Adam> helloGmailWorld

 Adam> or:

 Adam> helloWorldGmail

What you are describing is a rudimentary hash function, which I
believe is the best simple protection against the proliferation of
secure credentials.

I would suggest to up-the-ante (whatever that expression really means
:) and hash the name of the service. So instead of "helloGmailWorld"
you use somethin like "helloH4World". It makes it a bit more difficult
to decipher if you lose one key.


dmg



--
Daniel M. German                  
http://turingmachine.org/
http://silvernegative.com/
dmg (at) uvic (dot) ca
replace (at) with @ and (dot) with .


More information about the Discuss mailing list