May 20, 2004

You are on the invidual archive page of Pl8%spf25!@. Click Simon World weblog for the main page.
Pl8%spf25!@

Working in an office means one is constantly faced with a problem: passwords. A monthly email tells us to make sure all our passwords are different and that they are not obvious. For example you cannot use your own name as part of the password, nor can you repeat previous passwords. Most systems require new passwords every month or two and they must have 6 or 8 letters and include a capital and a number.

I use three PCs (3 passwords). Two of these PCs have single systems on them (2 more). The other one has a plethora of systems but daily I'll use five of them (5). Then there are the various intranet sites that require passwords and logins. In addition there's the personal ones like the PIN, internet banking, security codes and so on. Not to mention those for the blogs. It leads to a mess of logins and passwords and is more than any human can remember.

So I do what everyone does. I write them on a piece of paper. Direct contravention of the security policy but what the hell else can I do? We're also not meant to share passwords. Anyone who works in a team has to share passowrds so an absent team member can be covered or certain files can be accessed.

There must be a better way. A much better way. Fingerprint readers? Iris scans? I know they aren't perfect but they are far better than the current mess we deal with.

In the meantime I need to keep having kids just so I can have passwords. Just so long as their names are six letters or more.

posted by Simon on 05.20.04 at 12:20 PM in the




Trackbacks:

TrackBack URL for this entry:
http://blog.mu.nu/cgi/trackback.cgi/29204


Send a manual trackback ping to this post.


Comments:

There's a much better way. Hire a decent network administrator. He can set it up so your strong password gives you access to the network and that same approval handles everything else that's necessary.

Group projects should go in a group share where whoever needs them can get them. All of this is handleable with current generic security systems.

posted by: Jim on 05.20.04 at 11:10 PM [permalink]

That's the way we are going, one complex password handles most things, but at the minute, we are forced to have complex passwords to access various different systems. These systems used to enable personal passwords, but have recently changed. We get emailed our ridiculous password, write it down and fume everytime we have to type it in. No increase in security at all. The cleaner could log in.

posted by: shaky on 05.24.04 at 11:26 AM [permalink]




Post a Comment:

Name:


Email Address:


URL:


Comments:


Remember your info?










Disclaimer