These strong password requirements were not invented by evil
programmers designed to thwart the heroic efforts of usability
experts across the globe...

It is one of the minimum "due diligence" requirements (PCI) for
merchants who want to accept major credit cards online. 

http://usa.visa.com/merchants/risk_management/cisp_overview.html

No one wants to make it more difficult for a user to sign-up, but I
think everyone would agree that successful "brute force" attacks
are not very "user-friendly". 

It is not about security through "inconvenience" but there are real
technical reasons for strong passwords at least on e-commerce sites.
It is the lesser of two evils.

If a user has ADHD, then there is software to help them keep (and
even create) strong passwords.

http://www.snapfiles.com/get/keepass.html




. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Posted from the new ixda.org
http://www.ixda.org/discuss?post=34957


________________________________________________________________
Welcome to the Interaction Design Association (IxDA)!
To post to this list ....... [EMAIL PROTECTED]
Unsubscribe ................ http://www.ixda.org/unsubscribe
List Guidelines ............ http://www.ixda.org/guidelines
List Help .................. http://www.ixda.org/help

Reply via email to