[Discuss] Most common (or Most important) privacy leaks

Kent Borg kentborg at borg.org
Tue Feb 17 14:50:16 EST 2015


Passwords have serious problems, but they are bit like the problems with 
one-time-pads: cumbersome but otherwise perfect.

There is never going to be a generalized crack of the "password system". 
Even with some fancy Quantum Cryptography, passwords are not about to 
suffer a catastrophic failure. Flawed as they are in use, passwords are 
a solid tool in principle.

All the alternatives do risk major to gigantic failures.

Didn't South Korea issue everyone a smartcard, universal, to be used for 
everything? And then we find out they used a crappy random number generator.

All the alternative systems are complicated and brittle. Passwords are 
simple. Distributed. Robust.

Our use of passwords, on the other hand, is terrible. But all the 
alternatives to passwords are worse, so let's start educating everyone. 
Including discarding ages-old dogma that is wrong: Writing down 
passwords is good.

-kb




More information about the Discuss mailing list