In our virtual life we often come against the tedious, challenging and somewhat frustrating exercise of “Setting Passwords & Security Answers”. Seems any web site of interest demands ‘registration’ before we can access the real meat within. And this requires us to compose suitable passwords.
Way back when.. when bills were paid by checks, shopping was done with the exchange of cash for the actual item handed over, when life was simple – or should I say “convenient in a quaint sort of way” we didn’t worry about passwords. No need to force our brain to invent some jumbled up set of characters that are “easy to remember”. Easy..? How can gibberish be easy to remember? So we come up with something super-simple – a pet’s name or such, and keep it forever. And to make it really easy, we write it on a post-it and ‘hide’ that under the keyboard? (Do I hear any “yup, done that”?)
But then came the alarming news about the proliferation of identity theft, hacks and security breaches at those “trusted” websites, leading to the realization that nothing is private or secret in the ‘cloud’.
The online organizations fight back with all their might against hackers and predators, but in the process reduce us (the customer) to digital misfits as we try to play by the new rules.
How many people struggle with the required inane “security questions”? We have to chose from several stock questions, and provide a personalized answer. A well intentioned programmer decided these additional steps helped fortify the walls, and create a good and secure system – and actually, the technique is good.
But who invents these questions? Recently faced by a daunting list of stock questions to chose from, it became apparent they were decidedly prejudiced. Some 15 questions, 4 of which had to be selected and answers provided. Almost 50% assumed marriage. Almost all assumed a US upbringing and education. The target demographic was no doubt “middle class, affluent, clean-cut Americans”.
Who hasn’t come across these or similar?
“Who played at your first concert?” Huh.. I was about 3 when my parents took me to a music performance, do I remember who played?
“Color of your first car?” What if you grew up in a city and never had a car?
“Where did you honeymoon?” What if I married multiple times? Or never married?
“Who was your date at your prom” What if your date stood you up, or you didn’t go to a prom. Talk about rubbing salt into old wounds!
“Last name of your first teacher” Does anyone remember their kindergarten first teacher’s name? I sure don’t – didn’t like her/him and did all I could to forget.
“Favorite food?” This one really throws me. My favorite food changes weekly – I can’t imagine anyone specifying a food that will be their favorite for years to come. If so.. they must be on a very limited diet.
“Your husband’s mother’s maiden name?” Which husband; his birth or step mother… the options are endless.
So we wade through these required steps, desperately thinking of answers we will instantly remember when prompted years from now. A simple registration process can turn into hours of hand-wringing and agonizing!
Of course the actual passwords we chose are indeed very central to our security. We’re left in a quandary: “The harder to hack, the harder to remember”.
This is where I agree with those (tedious) alarmists who tell us to create super-difficult passwords. No, your pet’s name or kids birthday just doesn’t cut it these days. It must be complex, and non-guessable by others.
Some suggested reading to help deal with these contemporary frustrations:
An excellent article about security at The Atlantic
Some ideas as mentioned in the Atlantic article:
- “Choose a long, familiar-to-you sequence of ordinary words, with spaces between them as in a sentence, which more sites now allow.”
- “Choose a short sequence of words that are not “real” English words.”
- “Choose a truly obscure, gibberish password—“V*!amYeG4M5!3R” —and then find a way to store it. [perhaps] entrust them to online managers like LastPass or RoboForm.”
- “Never use “password,” “123456,” or your own birthday”!
- Use different passwords – “The guide should be: any site that matters needs its own password“
A Google Blog post on the subject
sPo0ky h@ll0W3en Ani1?
