Comments on thisUser: Stupid Password Policies

I have a complex password for all my accounts. It ...

2010-03-08T22:38:22.328-08:00

I have a complex password for all my accounts. It has 16 characters, combined with numbers and symbols. It works quite well until I sign up a online account with American Water and Athena Service(trash collecting). Beacause their stupid password rule not allow symbols. Conbining the symbols is the best way to create a strong password, if the key point is protecting your account, why not allow symbols?

Sorry for whining here. The artical make me feel better now :)

I think these websites simply use modified web mod...

2010-03-08T22:27:59.329-08:00

I think these websites simply use modified web module. It's just a pain in the axx. I don't know why they make the username and the password so complex since you can't do anything other than pay the bill. I guess they are trying to prevent someone pays the bill for you? The most stupid website I have ever seen is American Water company, they're not just ask for complex password, they even ask for complex username, such as 9-12 characters, at least 1 uppercase, 1 number, no symbols allowed. What's the point? I understand some website might have your personal information, but a water company? I can't even see my full account number when log in.. It just doesn't make sense. I kept forgot my username, and they ask for account number to reset. Since I check the paper less option, which leave me no way to find my stupid account number.. very stupid..

I won't disclose my password policy but I answer t...

2008-07-03T05:25:00.000-07:00

I won't disclose my password policy but I answer the stupid questions (I find most of them either irrelevant or insulting) with an expletive phrase I can remember. Helps me vent at the same time.

@Scott: Thanks for the response.

I do recom...

2008-07-02T23:57:00.000-07:00

@Scott: Thanks for the response.

I do recommend Scott's post about OpenID (and I'm going to post a reply over on his blog as well). Sadly, OpenID is pretty far from being a standard at this point. And, even more sad, I'll bet money that even as it gains in acceptance, web sites will just add a layer on top of OpenID that makes it clunky. That was one of the problems with Passport's adoption (one of many problems, and I know them well -- I worked very closely with the Passport team while at Microsoft and am a co-inventor of a Passport-related patent as well as another one that's pending).

Vidoop seems like a reasonable solution, but I haven't compared it with the competition.

I just posted a lengthy reply to Roy's password ra...

2008-07-02T23:34:00.000-07:00