Sunday, August 10, 2008

Goodbye, Passwords. You Aren't a Good Defense.

Journal #15

We are all used to the familiar signing-in log on page when we try to access what we think is secure information. But is it really secure? This article brings up the point that it is definitely not safe and secure to have only a single login website. It also suggests that there is no difference between the level of difficulty in passwords that we chose. A string of numbers such as '123456' and a random combination of letters and numbers, both have the same chance of being broken into. I think this is very interesting because I am one of those users who has a long complicated password, but almost never changes it. So, when my password is just as vulnerable as someone else's who just has 'LetMeIn,' I think it truly shows how nobody's password is safe. 

To solve this problem we should completely eliminate passwords and rely on cryptography instead. This is when the two machines trying to connect accept each other as the authentic site. In order for the machines to 'talk' to each other they need an Information Card, which only about 20% of computers have. Currently only Windows Vista machines have this equipment, so Windows XP, Mac, and Linux users would have to download the application. The new approach to logging onto sites is gaining attention as Microsoft and Google are among the six founding companies to promote the Information Card. But even if you don't have Windows Vista, and you can't download the program, then there are ways to help protect (but not eliminate) your password defense wall. Your computer should have a firewall, anti-virus, and anti-spyware software installed. And of course do not open emails or attachments from addresses you do not know. All these things should help protect you from password, and even identity theft, but in the long run the new Information Card is the way to go. 

No comments: