Locking out users gives attackers a tool for denial of service When I was a lad (OK, when I was a young systems engineer of 30 - which is 30 years ago), I was taught that if a user made several mistakes in entering her password, the system should lock her account until a system operator granted access again. The goal was to stop an attacker from guessing at a user’s password without limit.
Guide to enterprise password management drafted I hate passwords. I think passwords are a dreadful way of authenticating identity: they cost a lot, they change too often (and so users write them down), the rules for preventing dictionary and brute-force attacks are ...
Using smart cards vs. passwords for identification A recent Datamonitor survey showed that 62% of enterprises have experienced problems relating to passwords being shared, borrowed or stolen from within their organizations. The survey of 200 enterprises also found that only 21% of the respondents are confident that passwords will provide sufficient user authentication for their businesses over the next five years. Yet most of us are still using passwords. Isn't there a better way?
Single sign-on plus self-service password reset result in greater benefits At last week's Converge07 conference for Courion customers and friends I had the pleasure of sitting on a panel (well, I WAS the panel) for Courion VP of Services Nelson Ronkin's presentation about integrating ...
Validation, authorization: The next steps to identity management As someone pointed out to me last week, we're still spending an inordinate amount of time talking about authentication, and still trying to find a way to obviate the need for users to either memorize or write down lists ...
From 3Mbps over shared coax to 40/100Gbps over fiber…and beyond.
iPhone enthusiasts from around the Web offer their visions for the next-gen iPhone.
No comments:
Post a Comment