Re: Password safes &c. (was: Dear Linkedin,)

2012-06-09 Thread Jay Ashworth
Original Message - > From: "Lyndon Nerenberg" > The only way to ensure your personal passwords are never compromised > is to kill yourself after destroying all physical copies of those > passwords. While ultimately secure, you won't be able to do your daily > online banking. No, but on

Re: Password safes &c. (was: Dear Linkedin,)

2012-06-08 Thread JoeSox
On Fri, Jun 8, 2012 at 2:00 PM, Tyler Haske wrote: > KeePass, KeyPassDroid and Dropbox. > > I'm sure it will just get simpler as time goes on. I second this! I deploy KeePass via MS GPO. No formal training on the application for the end-users but we do one-on-one with end users when we can. I hav

Re: Password safes &c. (was: Dear Linkedin,)

2012-06-08 Thread Lyndon Nerenberg
On 2012-06-08, at 2:07 PM, Andrew Sullivan wrote: > I'm not trying to be dismissive. Those are excellent stopgap > measures. They're not a solution. There is no "solution." Security is about risk management, nothing more. The only way to ensure your personal passwords are never compromised i

Re: Password safes &c. (was: Dear Linkedin,)

2012-06-08 Thread Andrew Sullivan
On Fri, Jun 08, 2012 at 05:00:14PM -0400, Tyler Haske wrote: > KeePass, KeyPassDroid and Dropbox. Yes, of course, I'll just upload all my passwords to a place totally under the control of someone (well, actually, _two_ other ones) else, and then pray that there never turns out to be a nasty attack

Re: Password safes &c. (was: Dear Linkedin,)

2012-06-08 Thread Tyler Haske
KeePass, KeyPassDroid and Dropbox. I'm sure it will just get simpler as time goes on. My mom uses a key database just fine. On Jun 8, 2012 4:49 PM, "Andrew Sullivan" wrote: > > On Fri, Jun 08, 2012 at 01:30:42PM -0700, Michael Thomas wrote: > > PS: when security is hard, people simply don't do i

Password safes &c. (was: Dear Linkedin,)

2012-06-08 Thread Andrew Sullivan
On Fri, Jun 08, 2012 at 01:30:42PM -0700, Michael Thomas wrote: > PS: when security is hard, people simply don't do it. I think this is exactly right. The idea that we are going to train everyone on earth to keep eleventy billion distinct passwords in their heads -- or in a "password safe" that