Passwords - Design Errors And Operational Issues: Difference between revisions

From
Jump to navigation Jump to search
No edit summary
No edit summary
 
(2 intermediate revisions by the same user not shown)
Line 5: Line 5:
-The sheer number of applications for which the average person is asked to use a password exceeds the powers of human memory
-The sheer number of applications for which the average person is asked to use a password exceeds the powers of human memory
<br>
<br>
-This often results in using the same passwords for different purposes
-This often results in using the same passwords for different purposes<br><br>

''Example for a design error:''<br>
[[Passwords - A Bad Mnemonic System|A Bad Mnemonic System for Saving Pins]]<br><br>

''Example for operational issues:''<br>
-Using same passwords and circumstances for test environments and real environments, which can cause severe security problems, if both are accessable. (cmp. to the Prestel incident in Britain)<br>

-Failing to reset the default passwords supplied with products or services is always a source of security lacks





Latest revision as of 20:59, 8 November 2004

A frequent source of severe design errors can be fast built systems, developed by unskilled people:

-Identification for example by your “mother’s maiden name”, which is easy for the thief to find out from birth or marriage records
-The sheer number of applications for which the average person is asked to use a password exceeds the powers of human memory
-This often results in using the same passwords for different purposes

Example for a design error:
A Bad Mnemonic System for Saving Pins

Example for operational issues:
-Using same passwords and circumstances for test environments and real environments, which can cause severe security problems, if both are accessable. (cmp. to the Prestel incident in Britain)

-Failing to reset the default passwords supplied with products or services is always a source of security lacks



Back (Remembering the Password) | Table of Contents | Next (System Issues)