About Me
- Name: Sushant Bhatia
- Location: Tempe, Az
I work at CUbiC, the Center for Ubiquitous Computing at ASU. We are developing applications and devices for individuals who are blind. I personally am in charge of developing the iCare BookReader. This device will allow individuals who are blind to have print material read to them. The interface is intuitive and accessible. The process is much faster than using a scanner and our BookReader is quite feature rich. On a personal note, I love coding especially in .Net and C#.
My blog is about coding in .Net and about my interests in general. I love to read, esp Discworld novels by Terry Prattchet. I will post items about work, school, cool stuff and ideas for projects I have. If your ever interested in any of them, let me know as I would love to work on some of them.
Archives
Ankh Morpork's Finest Coder
Tuesday, January 25, 2005
Pluralsight Password Minder - WHY?
What were they thinking? What the hell were they thinking? A Password minder that generates and uses password that are "Secure". Give your credit card number to a spammer RIGHT NOW! Password managers while more secure than either recycling your passwords or using simple numeric or only alphabetical characters is still NOT secure. In the levels of security for 1 to 10, I give it a 3 and i'm being generous. My reasons for such a score. Well let me first say that I'm sure the code is all correct and that the program might be easy to use yadda yadda. BUT. Its a great security risk. Now if a trojan or some sort of logger is running, then a malicious person can get the password to your password manager and find a way to get the passwords out of it. BAD BAD BAD!
AOL now has a new card that hashes a number key that the login server of AOL knows about and because of this changing hash, it is a lot more secure than its counterparts. Again not the best but definately an 8.
So if you are using some password manager, don't just get rid of it because I said its a security threat. Its probably better than not using anything. However, if something like what AOL is providing comes along, then definately opt for that if you have the choice.