Stories
Slash Boxes
Comments
NOTE: use Perl; is on undef hiatus. You can read content, but you can't post it. More info will be forthcoming forthcomingly.

All the Perl that's Practical to Extract and Report

use Perl Log In

Log In

[ Create a new account ]

pudge (1)

pudge
  (email not shown publicly)
http://pudge.net/
AOL IM: Crimethnk (Add Buddy, Send Message)

I run this joint, see?

Journal of pudge (1)

Friday May 23, 2003
03:45 PM

Hints

[ #12416 ]

I hate it when an online system requires me to use a "hint," in case I forget my password. First, I don't need a hint. I know all my passwords. I do not lose my passwords. Second, if I did lose my passwords, you can be damned sure I would lose my hint too, because: Third, if I make my hint easy enough for me to remember without storing it somewhere, it would be far too easy for someone else to find out the answer. And if I am going to store it somewhere, why not just store the password instead?

The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More | Login | Reply
Loading... please wait.
  • Because... (Score:3, Insightful)

    by Ovid (2709) on 2003.05.23 16:27 (#20488) Homepage Journal

    ... I'll be daring and let the world know that a hint for a low-security password of mine is EAR. You will never, ever guess the password from that hint. No one who knows me will ever guess the password from that hint. You can guess until the cows come home and you simply won't get it. And if you happened to learn my password, you wouldn't be able to figure out why the hint matches it.

    Hints aren't as bad as you make them out to be, they just aren't used very carefully :)

    • Re:Because... (Score:3, Informative)

      I'll be daring and let the world know that a hint for a low-security password of mine is EAR. You will never, ever guess the password from that hint. No one who knows me will ever guess the password from that hint.

      I think you misunderstand me. What I am talking about are the hints that allow you to gain access to the account. "If you tell me what street you lived on when you were growing up, and your favorite actor's name, we will give you access, since you forgot your password."
      • Why would that be called a hint? There doesn't seem to be any hinting involved. I also misinterpreted your rant, because "hint" to me means what it does to Ovid.
  • I hear you! (Score:3, Insightful)

    by jdavidb (1361) on 2003.05.23 20:18 (#20494) Homepage Journal

    No kidding! It's one thing to let me specify a hint. It's another thing to make me, and another thing to only give me a few stupid easy questions to pick from. Why can't they email me my password (with or without resetting it) like everyone else?

    Now, if they let me specify a PGP public key, that would be something I could go for.

    --
    J. David works really hard, has a passion for writing good software, and knows many of the world's best Perl programmers
  • My hint is "Burrell". What's the password that that hints at?