On Sun, Dec 21, 2008 at 4:11 AM, Edward Jaffe
<[email protected]> wrote:
<snip>
> Forcing an operator to type in his/her password over and over is as annoying
> as it is wrong-headed. Passwords are intended to stay secure and every
> password prompt is a potential, but usually necessary, exposure. You should
> never be prompted to type your password more often than necessary.

Indeed -- well put. When my daughter was about 8, we were at Best Buy,
and she noticed that they make the cashiers login for *each customer*.
As a result, their passwords tend to be "12345678" or else a string of
all the same characters. Both of which are pretty easy to
shoulder-surf. Not that we did such a thing, of course...

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to