From: Mark Fowler Date: 14:46 on 23 Jan 2004 Subject: Website Passwords I can't remember my passwords for websites. I'm sorry, but it's just not worth my while remembering the password for your random site. Hell, I can hardly remember my password for my online banking - there's no way I'm going to memorise the details of my Bob's online bait house emporium account. Most web site designers have realised this. I like the fact that most sites can mail me passwords if I click on the 'ooops I'm a moron' button (or mail me a link that will let me reset my passwords, which is better as it never sends what might be a sensitive password over cleartext.) Other sites haven't. They expect me to email a real person. Real people are slow. And real people get pissed off if you mail them every couple of weeks. Hey, George, I've got an idea how we can save our company a mint! You know how Betty down in accounts spends half her day emailing clients with lost passwords? Maybe we could get that repetitive boring task done by one of these new fangled computer thingywosits! No Ernie, that'll never fly. bah.
From: Ben Collver Date: 15:14 on 23 Jan 2004 Subject: Re: Website Passwords On Fri, Jan 23, 2004 at 02:46:33PM +0000, Mark Fowler wrote: > Hey, George, I've got an idea how we can save our company a mint! You > know how Betty down in accounts spends half her day emailing clients with > lost passwords? Maybe we could get that repetitive boring task done by > one of these new fangled computer thingywosits! Mozilla has a password manager. I just use vi and gpg. Ben
From: Mark Fowler Date: 15:36 on 23 Jan 2004 Subject: Re: Website Passwords On Fri, 23 Jan 2004, Ben Collver wrote: > Mozilla has a password manager. I have more than one computer, and each of these have several browsers. However, yes, this does save me quite a lot of the time. > I just use vi and gpg. Still not really worth my time. I normally don't realise I'm going to need the password until I find I actually do.
From: Michel Rodriguez Date: 15:15 on 23 Jan 2004 Subject: Re: Website Passwords On Fri, 23 Jan 2004, Mark Fowler wrote: > I can't remember my passwords for websites. I'm sorry, but it's just not > worth my while remembering the password for your random site. Hell, I > can hardly remember my password for my online banking - there's no way I'm > going to memorise the details of my Bob's online bait house emporium > account. > > Most web site designers have realised this. I like the fact that most > sites can mail me passwords if I click on the 'ooops I'm a moron' button > (or mail me a link that will let me reset my passwords, which is better as > it never sends what might be a sensitive password over cleartext.) > > Other sites haven't. They expect me to email a real person. Real people > are slow. And real people get pissed off if you mail them every couple of > weeks. Guilty! The problem is that I really don't want to store people's passwords anywhere on the site. There is just too much chance of them leaking out (due to our organization policies quite a few people have access to the server that really should not IMO). So I only store the encrypted version. Then the code to regenerate a random password and assign it to the user becomes a little more complicated. But I'll get around to writing it soon ;--) Sorry about that... -- Michel Rodriguez Perl & XML http://www.xmltwig.com
Generated at 10:27 on 16 Apr 2008 by mariachi