Re: [FRIAM] Password Change Requests

2014-04-19 Thread Robert Holmes
On Fri, Apr 18, 2014 at 8:34 PM, Barry MacKichan barry.mackic...@mackichan.com wrote: Since I use a password manager (1Password) there is very little cost in keeping a 20-character password (which I never type anyway) even for those sites with 2-factor authentication. Doesn't this make

Re: [FRIAM] Password Change Requests

2014-04-19 Thread Gary Schiltz
I was always worried about that before I started LastPass, so I had already turned off the feature of saving passwords in my browsers, and cleared out already saved ones. That left me with having to remember passwords or writing them down somewhere, or equally bad, storing them in a file

Re: [FRIAM] Password Change Requests

2014-04-19 Thread Owen Densmore
On Sat, Apr 19, 2014 at 3:15 AM, Robert Holmes rob...@robertholmes.orgwrote: ​snip I must admit, this is the one issue that has kept me from adopting 1Password, LastPass etc. I'm lazy and I just know that at some point I would hit the Save this password? button when prompted by my browser

Re: [FRIAM] Password Change Requests

2014-04-19 Thread Robert Holmes
I'm not grokking something then... I thought Barry's setup was automatic, which is why he never had to enter his 20 character password? On Apr 19, 2014 4:26 PM, Owen Densmore o...@backspaces.net wrote: On Sat, Apr 19, 2014 at 3:15 AM, Robert Holmes rob...@robertholmes.orgwrote: ​snip I must

Re: [FRIAM] Password Change Requests

2014-04-19 Thread Owen Densmore
The pw manager extensions (1password, lastpass etc) require a master password to open them, the one password that rules them all. Once open, the pw manager has a list of sites. You click on the one you want. It goes to the appropriate URL and fills in the required fields to log you into that

Re: [FRIAM] Password Change Requests

2014-04-19 Thread Barry MacKichan
I *do* have to enter the master password for 1Password. From then on, for all my accounts, it is automatic or, at the worst, copy and paste. —Barry On 19 Apr 2014, at 14:20, Owen Densmore wrote: The pw manager extensions (1password, lastpass etc) require a master password to open them, the

Re: [FRIAM] Password Change Requests

2014-04-19 Thread Brent Auble
From: Owen Densmore o...@backspaces.net To: The Friday Morning Applied Complexity Coffee Group friam@redfish.com Sent: Saturday, April 19, 2014 4:20 PM Subject: Re: [FRIAM] Password Change Requests The pw manager extensions (1password, lastpass etc) require a master

Re: [FRIAM] Password Change Requests

2014-04-18 Thread glen
On 04/18/2014 10:12 AM, Owen Densmore wrote: In addition, lots of sites let you login with Google, Facebook, Twitter and others. So if we have a small number of 2-factor providers, the hassle would be minimized. I reject the argument for centralization. It seems to me a decentralized

Re: [FRIAM] Password Change Requests

2014-04-18 Thread Marcus G. Daniels
On Fri, 2014-04-18 at 10:45 -0700, glen wrote: Convenience is the _enemy_. Convenience has a cost. Pay it. If there is to be centralization, use economies of scale to detect and adapt to fraud rather try to prevent it. I agree these schemes to find a trustworthy agent are doomed to failure.

Re: [FRIAM] Password Change Requests

2014-04-18 Thread Steve Smith
Convenience is the _enemy_. Convenience has a cost. Pay it. Integrity has a cost, pay it. If there is to be centralization, use economies of scale to detect and adapt to fraud rather try to prevent it. Very well stated. Evolved systems do precisely this (adapt and exploit economies of

Re: [FRIAM] Password Change Requests

2014-04-18 Thread Barry MacKichan
I use 2-factor authentication on those sites that implement it, but I will not use a login from Google, for example, for anything besides logging into Google (which I never do anyway). I don't want Google to know every site I log into. I think it's creepy. Since I use a password manager

Re: [FRIAM] Password Change Requests

2014-04-18 Thread Marcus G. Daniels
On Fri, 2014-04-18 at 13:08 -0600, Steve Smith wrote: As individuals with enlightened self interest it would seem to be in our interest to understand how these things work and work *with* them rather than continue to try to brute-force *engineer* these things. In the social context, it is

Re: [FRIAM] Password Change Requests

2014-04-18 Thread glen
On 04/18/2014 12:34 PM, Barry MacKichan wrote: Since I use a password manager (1Password) there is very little cost in keeping a 20-character password (which I never type anyway) even for those sites with 2-factor authentication. Speaking of which, does anyone here have any opinions about

Re: [FRIAM] Password Change Requests

2014-04-18 Thread Owen Densmore
On Fri, Apr 18, 2014 at 1:34 PM, Barry MacKichan barry.mackic...@mackichan.com wrote: ​... Since I use a password manager (1Password) there is very little cost in keeping a 20-character password (which I never type anyway) even for those sites with 2-factor authentication. —Barry ​I too

Re: [FRIAM] Password Change Requests

2014-04-18 Thread Russell Standish
On Fri, Apr 18, 2014 at 05:34:43PM -0600, Owen Densmore wrote: On Fri, Apr 18, 2014 at 1:34 PM, Barry MacKichan barry.mackic...@mackichan.com wrote: ​... Since I use a password manager (1Password) there is very little cost in keeping a 20-character password (which I never type anyway)