|
-
-
jason745
- Thrifty Member
posted: Dec. 5, 2006 @ 6:37p
-
-
IWILLGETTHISDEAL
- Member
posted: Dec. 5, 2006 @ 11:17p
I use roboform. To keep my 3 machines in sync I use SVN client(http://tortoisesvn.tigris.org/) for source control and the data files are hosted at http://opensvn.csie.org/. PM me if anyone needs more information.
Kanosh said:Hello: I'd like to ask everyone - especially those with multiple online bank accounts and/or who have done AOR's - how you manage passwords. I've searched the FW forums but have not found anything on this topic. Right now my passwords are either stored in my head or on a sheet of paper. I'm wondering if there is a better way. I've been intrigued by roboform (www.roboform.com) and a quick google search reveals quite a few pw management programs that I've never heard of as well. Obviously, I have some issues with giving up my passwords to a program, but the convenience factor might win me over. Also, anyone have any old-fashioned (non high-tech) ways to remember a password?
|
-
-
scooterdog
- Member
posted: Dec. 6, 2006 @ 10:00p
Another satisfied Roboform user here - for something like the last three or four years.
One strategy for hard-to-guess passwords is to combine upper and lower case letters and numbers as a 'stem' that may have some personal meaning to you (say "TdEe720", where TdEe is something meaningful, 72 is your or a friend's birth year, and 0 is another signficant digit), and then for each website to use several digits to indicate what site it is (so for ING Direct, it would be 'TdEd720ING' and for PayPal it could be 'TdEd720Pay' etc.)
Just an idea I picked up and have adopted - makes it easy to generate and remember passwords (even with a password manager it is useful to have a system in place for new passwords). |
-
-
hypochondriac
- Senior Member
posted: Dec. 16, 2006 @ 2:34p
what about Yodlee? You can store your passwords online and have access to them anywhere. I haven't used it yet a friend told me about it. Not sure how safe/secure it is. |
-
-
teplitsa
- Frivolous Member
posted: Dec. 16, 2006 @ 6:22p
i use the same few army units i was in. to anyone else it looks like a random letter number combination. Headquarters Company 18th Airborne Corps would be something like hhc18abncrp or something else that is easy to remember for you since you spent a few years there. Best thing is each unit has a lot of combinations you can use so it's almost impossible to break.
Otherwise you need to practice some basic security skills.
Run anti-virus and anti-spyware. AVG and Spybot are free Have two firewalls. Hardware and software. I have one in my router and use the windows firewall. PATCH YOUR SYSTEM. MS releases updates once a month. Install them and look for updates for your firewall and any other software you run. lock down your wireless network. disable SID, WEP or WPA, MAC filtering be careful with P2P software watch out for shady websites. I use IE7 for the legit ones and store my passwords there and Firefox for everything else. Everyone wants to download some mod for Neverwinter Nights or some other game from Joe Blow's website, but a lot of times the small personal websites people run are the first to be hacked and used to install code on your PC without you knowing Do not click on pop ups and install unknown software that will make your PC faster Don't click any links telling you to log into your account and give people information when you log into a website only do so by manually going to that website
Most online security problems are caused by people's stupidity. most times the problem is not that the passwords are too easy to break, but that people give them away to others.
I'm also thinking of buying into Vista next year, but only the 64 bit. Most of the problems are due to the 32 bit x86 instruction set. Believe it or not, the basic instructions your PC uses were made by Intel in the 1970's as a contract to make a calculator for some Japaneese company. I've read comments by programmers that it's so bad that no amount of patching by MS or anyone else will fix the security problems and that the best solution is to go 64 bit just because the instruction set was made with the Internet in mind. |
-
-
sultorn
- Member
posted: Dec. 16, 2006 @ 8:21p
My Blackberry 7130c comes with a password keeper application.
Your post just reminded me of it, and I plan on using it. There's a master password to open the application, and once you're in, you have a list of the sites/titles you entered with the associated usernames and passwords.
Neat since I always have my phone with me and if I were to lose it, there's a password on the application anyway. |
-
-
vrovner
- Addicted Member
posted: Dec. 17, 2006 @ 10:12p
Wouldn' you buy a 64-bit processor that is x86 compatible anyway? (unless you are thinking of getting an Itanium chip ). Anyhow, most of the security issues come from a programmer .. not from the instruction set. Sure, the processor could help by preventing execution of certain code, thus making it somewhat easier to write bug-free code.
teplitsa said: I'm also thinking of buying into Vista next year, but only the 64 bit. Most of the problems are due to the 32 bit x86 instruction set. Believe it or not, the basic instructions your PC uses were made by Intel in the 1970's as a contract to make a calculator for some Japaneese company. I've read comments by programmers that it's so bad that no amount of patching by MS or anyone else will fix the security problems and that the best solution is to go 64 bit just because the instruction set was made with the Internet in mind. |
-
-
alexnyc
- Member
posted: Dec. 18, 2006 @ 8:49p
disable SID, WEP or WPA, MAC filtering
repeat: WEP is not secure, WEP is not secure (at all)
Use WPA |
-
-
teplitsa
- Frivolous Member
posted: Dec. 18, 2006 @ 9:10p
vrovner said:Wouldn' you buy a 64-bit processor that is x86 compatible anyway? (unless you are thinking of getting an Itanium chip ). Anyhow, most of the security issues come from a programmer .. not from the instruction set. Sure, the processor could help by preventing execution of certain code, thus making it somewhat easier to write bug-free code.
teplitsa said: I'm also thinking of buying into Vista next year, but only the 64 bit. Most of the problems are due to the 32 bit x86 instruction set. Believe it or not, the basic instructions your PC uses were made by Intel in the 1970's as a contract to make a calculator for some Japaneese company. I've read comments by programmers that it's so bad that no amount of patching by MS or anyone else will fix the security problems and that the best solution is to go 64 bit just because the instruction set was made with the Internet in mind.
but you want the OS to use the 64bit instruction set, not the old x86 |
-
-
teplitsa
- Frivolous Member
posted: Dec. 18, 2006 @ 9:12p
alexnyc said:disable SID, WEP or WPA, MAC filtering
repeat: WEP is not secure, WEP is not secure (at all)
Use WPA
some people are too cheap to buy a newer router |
-
-
bags
- Member
posted: Dec. 18, 2006 @ 11:01p
I used to use KeePass and kept it on my USB, but my USB got pulled out of the connection one time without first closing the connection and corrupted about 2/3's of my password database. Since then I've purchased and used RoboForm for some time now with great success. I liked the feature in KeePass that set an expiration date on passwords as it reminded me to change them everyone so often, but I like that RF is a toolbar in my browser (FireFox,IE) and doesn't take up as much space as KeePass. One downfall to this same thing is utilities that are not browser based have limited usage with RoboForm as they cannot automatically log you in like KeePass could. |
-
-
jasonroehm
- Broke Member
posted: Dec. 19, 2006 @ 1:01p
teplitsa said: I'm also thinking of buying into Vista next year, but only the 64 bit. Most of the problems are due to the 32 bit x86 instruction set. Believe it or not, the basic instructions your PC uses were made by Intel in the 1970's as a contract to make a calculator for some Japaneese company. I've read comments by programmers that it's so bad that no amount of patching by MS or anyone else will fix the security problems and that the best solution is to go 64 bit just because the instruction set was made with the Internet in mind.
Whoever made those comments surely is not a "programmer" of any kind. Security issues such as those encountered by Microsoft and others have absolutely nothing to do with the instruction set architecture of the CPU. Yes, the x86 instruction set is very old, and the trend in most CPU architectures over the past decade or so has been to use RISC instruction sets instead of the much more complex scheme that x86 processors use. However, the 64-bit instruction set was not "made with the Internet in mind." CPU instructions accomplish tasks at such a low level that there is no way they can be "designed for the Internet," and they absolutely do not have any correlation to the number of security problems that have popped up over the past few years; that assertion is, to put it mildly, absurd. If the ISA is responsible for security issues, then obviously no other operating system running on an x86 would be secure either; however, you'll find other OS implementations (BSD, some flavors of Linux) that are very secure. Security issues, instead, are caused by incorrect software design; this responsibility falls squarely on the software engineers who produce the product. The above comment is nothing but absolute misinformation, probably originated by someone who had an interest in adoption of 64-bit processors. |
-
-
jumroo
- Ancient Member
posted: Dec. 19, 2006 @ 3:02p
i always use
***************
as my password 
|
-
-
teplitsa
- Frivolous Member
posted: Dec. 19, 2006 @ 4:40p
jasonroehm said:teplitsa said: I'm also thinking of buying into Vista next year, but only the 64 bit. Most of the problems are due to the 32 bit x86 instruction set. Believe it or not, the basic instructions your PC uses were made by Intel in the 1970's as a contract to make a calculator for some Japaneese company. I've read comments by programmers that it's so bad that no amount of patching by MS or anyone else will fix the security problems and that the best solution is to go 64 bit just because the instruction set was made with the Internet in mind.
Whoever made those comments surely is not a "programmer" of any kind. Security issues such as those encountered by Microsoft and others have absolutely nothing to do with the instruction set architecture of the CPU. Yes, the x86 instruction set is very old, and the trend in most CPU architectures over the past decade or so has been to use RISC instruction sets instead of the much more complex scheme that x86 processors use. However, the 64-bit instruction set was not "made with the Internet in mind." CPU instructions accomplish tasks at such a low level that there is no way they can be "designed for the Internet," and they absolutely do not have any correlation to the number of security problems that have popped up over the past few years; that assertion is, to put it mildly, absurd. If the ISA is responsible for security issues, then obviously no other operating system running on an x86 would be secure either; however, you'll find other OS implementations (BSD, some flavors of Linux) that are very secure. Security issues, instead, are caused by incorrect software design; this responsibility falls squarely on the software engineers who produce the product. The above comment is nothing but absolute misinformation, probably originated by someone who had an interest in adoption of 64-bit processors.
read it on slashdot
biggest problem with MS is buffer overruns and I've read that the 64bit instruction set makes it a lot easier to program for checking for buffer overruns than x86. That's what I meant designed for the internet. 10 years ago no one cared about buffer overruns. Now you have script kiddies nmapping whole subnets looking for unpatched boxes to hack and shady websites trying to install code on your machine
Linux has just as much updates as windows. i used to play with redhat and everyday they released an update for some package. And since it's only used on the desktop by people who know what they are doing there is no sense in trying to hack a tiny portion of the user base that knows how to avoid being hacked. |
-
-
teplitsa
- Frivolous Member
posted: Dec. 19, 2006 @ 4:40p
jasonroehm said:teplitsa said: I'm also thinking of buying into Vista next year, but only the 64 bit. Most of the problems are due to the 32 bit x86 instruction set. Believe it or not, the basic instructions your PC uses were made by Intel in the 1970's as a contract to make a calculator for some Japaneese company. I've read comments by programmers that it's so bad that no amount of patching by MS or anyone else will fix the security problems and that the best solution is to go 64 bit just because the instruction set was made with the Internet in mind.
Whoever made those comments surely is not a "programmer" of any kind. Security issues such as those encountered by Microsoft and others have absolutely nothing to do with the instruction set architecture of the CPU. Yes, the x86 instruction set is very old, and the trend in most CPU architectures over the past decade or so has been to use RISC instruction sets instead of the much more complex scheme that x86 processors use. However, the 64-bit instruction set was not "made with the Internet in mind." CPU instructions accomplish tasks at such a low level that there is no way they can be "designed for the Internet," and they absolutely do not have any correlation to the number of security problems that have popped up over the past few years; that assertion is, to put it mildly, absurd. If the ISA is responsible for security issues, then obviously no other operating system running on an x86 would be secure either; however, you'll find other OS implementations (BSD, some flavors of Linux) that are very secure. Security issues, instead, are caused by incorrect software design; this responsibility falls squarely on the software engineers who produce the product. The above comment is nothing but absolute misinformation, probably originated by someone who had an interest in adoption of 64-bit processors. |
-
-
RadagastMOD
- Senior Member
posted: Dec. 19, 2006 @ 5:10p
teplitsa said:jasonroehm said:teplitsa said: I'm also thinking of buying into Vista next year, but only the 64 bit. Most of the problems are due to the 32 bit x86 instruction set. Believe it or not, the basic instructions your PC uses were made by Intel in the 1970's as a contract to make a calculator for some Japaneese company. I've read comments by programmers that it's so bad that no amount of patching by MS or anyone else will fix the security problems and that the best solution is to go 64 bit just because the instruction set was made with the Internet in mind.
Whoever made those comments surely is not a "programmer" of any kind. Security issues such as those encountered by Microsoft and others have absolutely nothing to do with the instruction set architecture of the CPU. Yes, the x86 instruction set is very old, and the trend in most CPU architectures over the past decade or so has been to use RISC instruction sets instead of the much more complex scheme that x86 processors use. However, the 64-bit instruction set was not "made with the Internet in mind." CPU instructions accomplish tasks at such a low level that there is no way they can be "designed for the Internet," and they absolutely do not have any correlation to the number of security problems that have popped up over the past few years; that assertion is, to put it mildly, absurd. If the ISA is responsible for security issues, then obviously no other operating system running on an x86 would be secure either; however, you'll find other OS implementations (BSD, some flavors of Linux) that are very secure. Security issues, instead, are caused by incorrect software design; this responsibility falls squarely on the software engineers who produce the product. The above comment is nothing but absolute misinformation, probably originated by someone who had an interest in adoption of 64-bit processors.
read it on slashdot
biggest problem with MS is buffer overruns and I've read that the 64bit instruction set makes it a lot easier to program for checking for buffer overruns than x86. That's what I meant designed for the internet. 10 years ago no one cared about buffer overruns. Now you have script kiddies nmapping whole subnets looking for unpatched boxes to hack and shady websites trying to install code on your machine
Linux has just as much updates as windows. i used to play with redhat and everyday they released an update for some package. And since it's only used on the desktop by people who know what they are doing there is no sense in trying to hack a tiny portion of the user base that knows how to avoid being hacked.
It sounds like you are talking about the NX bit, not a difference in instruction sets... |
-
-
thinwallet4d
- Member
posted: Jan. 7, 2007 @ 11:20a
mespin said:It's not just passwords -- it's also usernames that need to be managed. I have so many usernames, account numbers, etc. on various sites.
I just use Yodlee to view/auto-login to my accounts. The MoneyCenter version also has a feature to reveal your password if you ever need your login info.
For the accounts that don't work with Yodlee, I have an encrypted Access file
This is of particular concern to me. If your MoneyCenter password gets compromised somehow, then ALL of your accounts are compromised. Even if you turn off the auto-login feature, the passwords for all of your accounts are available just with your MoneyCenter password. This is a gaping security hole, as far as I am concerned. That totally negates the advantage of having different passwords in the first place. I emailed the MoneyCenter support with this and they friendly, but clearly stated that they consider this a feature and this will NOT be changed.
Does anyone know of an equivalent of MoneyCenter that disallows both the password recovery and auto-logon? so far I have tried:
MoneyCenter: Auto-login can be disabled, but passwords can be recovered in clear, so what is the point?
EasyView from HSBC: they dont allow password recovery nor auto-login, but the yodlee version is so old, that half of my accounts cannot be accessed.
My Portfolio from Bank of America: No password recovery feature and new yodlee versio, but auto-login cannot be disabled.
Can anyone help? |
-
-
reverseknarf
- New Member
posted: Jan. 7, 2007 @ 12:41p
alexnyc said:disable SID, WEP or WPA, MAC filtering
repeat: WEP is not secure, WEP is not secure (at all)
Use WPA
repeat: WPA is not secure, WPA is not secure (at all)
Use a cable. |
-
-
sloop
- Member
posted: Jan. 7, 2007 @ 1:09p
I keep a manilla folder for each credit card and bank account. This is where I store statements, cards I don't use, notices, etc.
Inside each manilla folder I tape a sticky note in with the username and password. Each password is generated with an online random password generator. |
-
-
kai2007
- Member
posted: Jan. 7, 2007 @ 2:33p
I store all my passwords on a piece of software written by a Ukrainian company. They say everything is secure. |
Close
|
|
 |
 |
Not Already A Member?
Sign Up Now!
|
|
Disclaimer: By providing links to other sites, FatWallet.com does not guarantee, approve or endorse the information or products available at these sites, nor does a link indicate any association with or endorsement by the linked site to FatWallet.com.
|
|