funsec mailing list archives

Re: 1 in 3 workers write down passwords


From: "Fergie" <fergdawg () netzero net>
Date: Wed, 18 Oct 2006 18:50:19 GMT

It's trivial these days to use something like RoboForm, which
stores your passwords in an encrypted form (and on a USB key, too),
as well as give you the option of generating "strong" passwords on
the fly, etc.

Also, IBM-Lenovo ships a utility called "ThinkVantage Password
Manager" with their Thinpad laptops which basically does the same
thing.

It's getting better...

- ferg



-- "Dude VanWinkle" <dudevanwinkle () gmail com> wrote:

[snip]

I would at least use a keyring on top of having a txt file on an
encrypted disk.
Whole disk encryption is great and all, but its not a security buffer
once you boot up. If someone can compromise the userland part of your
workstation through the nic(via html, java, java script,, random
OS/application flaw) the file is not encrypted to them.



--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: