Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #83972

Re: Hello World

Date 2015-01-17 19:13 -0700
From Michael Torrie <torriem@gmail.com>
Subject Re: Hello World
References (5 earlier) <mailman.17814.1421512178.18130.python-list@python.org> <h9gqob-c3e.ln1@esprimo.zbmc.eu> <mailman.17815.1421519526.18130.python-list@python.org> <54baf443$0$13002$c3e8da3$5496439d@news.astraweb.com> <CAPTjJmps7zjqqde_nKe2=g18xoL4QG+_n1SctANojWYeyCGxTw@mail.gmail.com>
Newsgroups comp.lang.python
Message-ID <mailman.17831.1421574655.18130.python-list@python.org> (permalink)

Show all headers | View raw

On 01/17/2015 05:04 PM, Chris Angelico wrote:
> Related to that is another reason I've heard: if your password is
> figured out by some means other than hash theft [1], there's a maximum
> of N days to make use of it. But let's face it, if someone gets hold
> of one of your accounts, it won't take long to do serious damage. Even
> if it's not a high-profile target like email or banking, a service
> with your password known by someone else is a problem *now*, not
> "after a month of research" or something.
> 
> Password maximum age is the wrong solution to a few problems, and is
> itself a problem. Don't do it.

Most password policies are the wrong solution.  They don't seem to
increase the time to guess the password given the hash, and they
certainly don't physically secure anything, as passwords that have to be
changed often and to bizarre notions of upper case, lower case, digits,
non-alphanumeric characters, are guaranteed to be written down and
pasted to the monitor.

Like many of you I use a password manager these days.  It's pretty
slick.  But really it shows the absurdity of the situation.  Instead of
passwords we should all just use private/public keypairs and store the
private keys in a digital wallet.  Forget this password garbage with
it's 50-70 bits of entropy.  Let's go for 2048-bit keys and be done with
it, if we're going to require the use of password managers.

Back to comp.lang.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Hello World Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2014-12-20 23:57 +1100
  Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-21 00:11 +1100
  Re: Hello World Mark Lawrence <breamoreboy@yahoo.co.uk> - 2014-12-20 16:13 +0000
  Re: Hello World Rustom Mody <rustompmody@gmail.com> - 2014-12-20 08:50 -0800
  Re: Hello World Steve Hayes <hayesstw@telkomsa.net> - 2014-12-20 20:39 +0200
  Re: Hello World alister <alister.nospam.ware@ntlworld.com> - 2014-12-20 22:18 +0000
  Re: Hello World CM <cmpython@gmail.com> - 2014-12-20 21:14 -0800
    Re: Hello World Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2014-12-21 16:26 +1100
    Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-21 16:31 +1100
    Re: Hello World Terry Reedy <tjreedy@udel.edu> - 2014-12-21 01:31 -0500
      Re: Hello World wxjmfauth@gmail.com - 2014-12-21 00:07 -0800
    Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-21 17:44 +1100
      Re: Hello World CM <cmpython@gmail.com> - 2014-12-20 23:44 -0800
        Re: Hello World CM <cmpython@gmail.com> - 2014-12-20 23:45 -0800
          Re: Hello World Marko Rauhamaa <marko@pacujo.net> - 2014-12-21 10:26 +0200
        Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-21 18:46 +1100
      Re: Hello World albert@spenarnc.xs4all.nl (Albert van der Horst) - 2015-01-08 12:43 +0000
        Re: Hello World Chris Angelico <rosuav@gmail.com> - 2015-01-08 23:53 +1100
          Re: Hello World albert@spenarnc.xs4all.nl (Albert van der Horst) - 2015-01-08 13:37 +0000
          Re: Hello World Marko Rauhamaa <marko@pacujo.net> - 2015-01-08 16:06 +0200
            Re: Hello World alister <alister.nospam.ware@ntlworld.com> - 2015-01-08 14:21 +0000
              Re: Hello World Marko Rauhamaa <marko@pacujo.net> - 2015-01-08 16:31 +0200
                Re: Hello World alister <alister.nospam.ware@ntlworld.com> - 2015-01-08 15:14 +0000
          Re: Hello World Michael Ströder <michael@stroeder.com> - 2015-01-08 15:11 +0100
          Re: Hello World albert@spenarnc.xs4all.nl (Albert van der Horst) - 2015-01-17 14:51 +0000
            Re: Hello World Chris Angelico <rosuav@gmail.com> - 2015-01-18 01:57 +1100
              Re: Hello World cl@isbd.net - 2015-01-17 15:18 +0000
            Re: Hello World Michael Torrie <torriem@gmail.com> - 2015-01-17 09:29 -0700
              Re: Hello World cl@isbd.net - 2015-01-17 16:47 +0000
                Re: Hello World albert@spenarnc.xs4all.nl (Albert van der Horst) - 2015-01-17 18:06 +0000
                Re: Hello World Michael Ströder <michael@stroeder.com> - 2015-01-17 19:47 +0100
                Re: Hello World Michael Torrie <torriem@gmail.com> - 2015-01-17 19:09 -0700
                Re: Hello World Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2015-01-18 13:37 +1100
                Re: Hello World Roy Smith <roy@panix.com> - 2015-01-17 22:18 -0500
                Re: Hello World Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2015-01-18 14:45 +1100
                Re: Hello World Chris Angelico <rosuav@gmail.com> - 2015-01-18 18:45 +1100
                Re: Hello World Roy Smith <roy@panix.com> - 2015-01-18 07:26 -0500
                Re: Hello World Tim Chase <python.list@tim.thechases.com> - 2015-01-17 21:50 -0600
                Re: Hello World Chris Angelico <rosuav@gmail.com> - 2015-01-18 18:44 +1100
                Re: Hello World Mark Lawrence <breamoreboy@yahoo.co.uk> - 2015-01-17 18:31 +0000
                Re: Hello World Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2015-01-18 10:46 +1100
                Re: Hello World Chris Angelico <rosuav@gmail.com> - 2015-01-18 11:04 +1100
                Re: Hello World Jason Friedman <jsf80238@gmail.com> - 2015-01-17 18:19 -0700
                Re: Hello World Michael Torrie <torriem@gmail.com> - 2015-01-17 19:13 -0700
                Re: Hello World Marko Rauhamaa <marko@pacujo.net> - 2015-01-18 12:03 +0200
                Re: Hello World Michael Ströder <michael@stroeder.com> - 2015-01-18 14:34 +0100
                Re: Hello World Marko Rauhamaa <marko@pacujo.net> - 2015-01-18 18:03 +0200
                Re: Hello World Michael Ströder <michael@stroeder.com> - 2015-01-18 19:39 +0100
                Re: Hello World Chris Angelico <rosuav@gmail.com> - 2015-01-18 21:10 +1100
                Re: Hello World Marko Rauhamaa <marko@pacujo.net> - 2015-01-18 22:50 +0200
                Re: Hello World Michael Ströder <michael@stroeder.com> - 2015-01-18 14:32 +0100
                Re: Hello World Chris Angelico <rosuav@gmail.com> - 2015-01-18 21:00 +1100
                Re: Hello World Michael Ströder <michael@stroeder.com> - 2015-01-18 14:35 +0100
                Re: Hello World Chris Angelico <rosuav@gmail.com> - 2015-01-19 00:57 +1100
                Re: Hello World Michael Ströder <michael@stroeder.com> - 2015-01-18 16:48 +0100
                Re: Hello World Chris Angelico <rosuav@gmail.com> - 2015-01-19 04:08 +1100
                Re: Hello World Michael Ströder <michael@stroeder.com> - 2015-01-18 14:30 +0100
        Re: Hello World Steve Hayes <hayesstw@telkomsa.net> - 2015-01-08 19:02 +0200
          Re: Hello World Chris Angelico <rosuav@gmail.com> - 2015-01-09 04:11 +1100
            Re: Hello World albert@spenarnc.xs4all.nl (Albert van der Horst) - 2015-01-17 15:10 +0000
          Re: Hello World Michael Torrie <torriem@gmail.com> - 2015-01-08 10:53 -0700
            Re: Hello World Grant Edwards <invalid@invalid.invalid> - 2015-01-08 18:57 +0000
    Re: Hello World Devin Jeanpierre <jeanpierreda@gmail.com> - 2015-01-17 16:06 -0800
  Re: Hello World Tony the Tiger <tony@tiger.invalid> - 2014-12-21 19:22 +0000
    Re: Hello World Marko Rauhamaa <marko@pacujo.net> - 2014-12-21 22:02 +0200
    Re: Hello World Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2014-12-22 09:51 +1100
      Re: Hello World Roy Smith <roy@panix.com> - 2014-12-21 18:50 -0500
        Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-22 11:10 +1100
          Re: Hello World Roy Smith <roy@panix.com> - 2014-12-21 19:12 -0500
            Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-22 11:36 +1100
          Re: Hello World mm0fmf <none@mailinator.com> - 2014-12-22 00:20 +0000
            Re: Hello World Tim Chase <python.list@tim.thechases.com> - 2014-12-21 18:47 -0600
            Re: Hello World Mark Lawrence <breamoreboy@yahoo.co.uk> - 2014-12-22 02:56 +0000
          Re: Hello World Marko Rauhamaa <marko@pacujo.net> - 2014-12-22 10:52 +0200
            Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-22 20:01 +1100
        Re: Hello World Grant Edwards <invalid@invalid.invalid> - 2014-12-22 16:23 +0000
          Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-23 04:25 +1100
          Re: Hello World Mark Lawrence <breamoreboy@yahoo.co.uk> - 2014-12-22 18:51 +0000
          Re: Hello World MRAB <python@mrabarnett.plus.com> - 2014-12-22 19:05 +0000
          Re: Hello World Tim Chase <python.list@tim.thechases.com> - 2014-12-22 13:16 -0600
            Re: Hello World Roy Smith <roy@panix.com> - 2014-12-22 19:55 -0500
              Re: Hello World sohcahtoa82@gmail.com - 2014-12-22 17:03 -0800
                Re: Hello World MRAB <python@mrabarnett.plus.com> - 2014-12-23 01:37 +0000
                Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-23 12:39 +1100
                Re: Hello World Mark Lawrence <breamoreboy@yahoo.co.uk> - 2014-12-23 02:36 +0000
                Re: Hello World Dennis Lee Bieber <wlfraed@ix.netcom.com> - 2014-12-23 12:24 -0500
              Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-23 12:03 +1100
          Encryption - was Hello World Dave Angel <d@davea.name> - 2014-12-22 14:57 -0500
          Re: Encryption - was Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-23 09:29 +1100
          Re: Encryption - was Hello World Dave Angel <davea@davea.name> - 2014-12-22 18:22 -0500
      Re: Hello World Rustom Mody <rustompmody@gmail.com> - 2014-12-21 18:37 -0800
      Re: Hello World Steve Hayes <hayesstw@telkomsa.net> - 2014-12-22 08:21 +0200
        Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-22 17:33 +1100
          Re: Hello World Steve Hayes <hayesstw@telkomsa.net> - 2014-12-22 09:46 +0200
            Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-22 18:56 +1100
        Re: Hello World Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2014-12-22 20:18 +1100
          Re: Hello World Marko Rauhamaa <marko@pacujo.net> - 2014-12-22 11:34 +0200
            Re: Hello World Rustom Mody <rustompmody@gmail.com> - 2014-12-22 19:38 -0800
          Re: Hello World Roy Smith <roy@panix.com> - 2014-12-22 08:15 -0500
            Re: Hello World Chris Angelico <rosuav@gmail.com> - 2014-12-23 00:23 +1100
              OFF TOPIC Snow Crash [was Re: Hello World] Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2014-12-23 13:09 +1100
                Re: OFF TOPIC Snow Crash [was Re: Hello World] Grant Edwards <invalid@invalid.invalid> - 2014-12-23 16:20 +0000
                Re: OFF TOPIC Snow Crash [was Re: Hello World] Rustom Mody <rustompmody@gmail.com> - 2014-12-23 08:41 -0800
                Re: OFF TOPIC Snow Crash [was Re: Hello World] Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2014-12-24 12:51 +1100
                Re: OFF TOPIC Snow Crash [was Re: Hello World] Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2014-12-24 14:18 +1100
                Re: OFF TOPIC Snow Crash [was Re: Hello World] alister <alister.nospam.ware@ntlworld.com> - 2014-12-24 11:50 +0000
                Re: OFF TOPIC Snow Crash [was Re: Hello World] alex23 <wuwei23@gmail.com> - 2014-12-26 09:34 +1000
                Re: OFF TOPIC Snow Crash [was Re: Hello World] alex23 <wuwei23@gmail.com> - 2014-12-26 09:27 +1000
                Re: OFF TOPIC Snow Crash [was Re: Hello World] Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2014-12-26 15:13 +1100
                Re: OFF TOPIC Snow Crash [was Re: Hello World] alister <alister.nospam.ware@ntlworld.com> - 2014-12-26 10:03 +0000
            Re: Hello World Marko Rauhamaa <marko@pacujo.net> - 2014-12-22 15:26 +0200
              Re: Hello World Roy Smith <roy@panix.com> - 2014-12-22 08:41 -0500
        Re: Hello World Roy Smith <roy@panix.com> - 2014-12-22 08:13 -0500
          Re: Hello World Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2014-12-23 02:22 +1100
            Re: Hello World Jussi Piitulainen <jpiitula@ling.helsinki.fi> - 2014-12-22 17:36 +0200
              Re: Hello World Chris Warrick <kwpolska@gmail.com> - 2014-12-22 17:03 +0100
            Re: Hello World Skip Montanaro <skip.montanaro@gmail.com> - 2014-12-22 09:39 -0600
              Re: Hello World Steven D'Aprano <steve+comp.lang.python@pearwood.info> - 2014-12-23 03:54 +1100
            Re: Hello World Mark Lawrence <breamoreboy@yahoo.co.uk> - 2014-12-22 18:48 +0000
        Re: Hello World Grant Edwards <invalid@invalid.invalid> - 2014-12-22 16:26 +0000
    Re: Hello World Grant Edwards <invalid@invalid.invalid> - 2014-12-22 16:18 +0000
      Re: Hello World alister <alister.nospam.ware@ntlworld.com> - 2014-12-22 19:05 +0000

csiph-web