Re: Password Security

[Valdis Kletnieks <Valdis.Kletnieks () VT EDU>]

On Tue, 23 Oct 2007 11:03:55 PDT, Steven Alexander said:
> Ascribing to a bad practice may make you liable for negligence, but it
> won't change the damages once you're negligent.  Except in egregious
> cases where punitive damages come into play, which is unlikely here,

But keep reading...

> ...
> I don't see why prior notice would be an issue here.

Prior notice may matter because "they were *told* it was a Bad Idea and they
went ahead and intentionally did it *anyhow*" is the sort of thing that changes
regular everyday negligence into the sort that has "reckless" and "egregious"
attached to it, and then the punitive damages come into play.

The easiest way to combat this - ask the people who are suggesting it:

"How worried are you that if your wallet is lost, your ATM card would be
used to drain your account before you got the bank on the phone?  OK, now
how worried would you be if you had written your PIN on the front of the
card?"

Attachment: _bin
Description: