Archive for the ‘Security’ Category

The Right Tool for the Right Job

Tuesday, March 9th, 2010

There is a common assumption among those who do not work in a technical field that because an individual is qualified to do one type of technical work, they are qualified to do it all.

Everyone hears it at some point. The dreaded phrase “well you work on computers so you must know…”.

“So, you work on computers so you must know about web design.”

Or conversely:

“You build websites so how do I fix X on my computer?”

I’m not entirely sure how this mindset came about. When you think about it, do you go to a proctologist if you have skin problems? Of course not! You see the dermatologist.

(more…)

How to Make A Better Password

Wednesday, February 10th, 2010

The New York Times released an article titled If Your Password Is 123456, Just Make It HackMe addressing the popularity of very weak passwords.

Vance (the author) says, “According to a new analysis, one out of five Web users still decides to leave the digital equivalent of a key under the doormat: they choose a simple, easily guessed password like “abc123,” “iloveyou” or even “password” to protect their data.”

This doesn’t surprise me at all. In the years I’ve spent in this industry, I’ve seen many very weak passwords. As a web designer, some clients will authorize me to set up their site and create email accounts for them. This means they’ll give me the password they want used. Often, I’ve had to go back to them with a new password since their chosen one was too weak for the system to accept. Even the client’s alternative password, though finally accepted by the server, are still often far too weak to be secure. (more…)