nanog mailing list archives

Re: LinkedIn password database compromised


From: Michael Hallgren <m.hallgren () free fr>
Date: Thu, 07 Jun 2012 23:35:59 +0200

Hi Randy,

Le jeudi 07 juin 2012 à 10:03 -0700, Randy Bush a écrit :
hi etaoin,

I still don't want single sign on.  Not anywhere.

i believe that 'single sign on' is a bad deal and dangerous for all, not
just we geeks.  essentially it means that the 'identiry provider' owns
your identity.  i love that they call themselves 'identity providers'
when it is MY fracking identity and they are reselling it.

I agree.


the 'single sign on' i encourage for the end using human beings i
support is 1password and its ilk.  it provides the user with one sign-on
yet strongly encourages separation of identities and strong passwords
for sites.


Local repository of passwords, aggregation in a way. Right? Encrypted?
Open source?

add to that, something such as ghostery for your browser, and you have a
small chance of actually preserving your identity and minimizing cross-
site tracking.

randy

mh






Current thread: