Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!swrinde!ucsd!mvb.saic.com!ncr-sd!iss-rb!booboo!davel
From: davel@booboo.SanDiego.NCR.COM (David Lord)
Newsgroups: comp.misc
Subject: Re: (In)security of passwords
Message-ID: <1991Apr1.182558.9014@SanDiego.NCR.COM>
Date: 1 Apr 91 18:25:58 GMT
References: <1097@gtenmc.UUCP> <1991Mar26.191052.4620@chinet.chi.il.us> <1046@hrshcx.csd.harris.com> <JIK.91Mar29140950@pit-manager.mit.edu>
Sender: @SanDiego.NCR.COM
Reply-To: davel@booboo.SanDiego.NCR.COM (David Lord)
Organization: NCR Corporation, Rancho Bernardo
Lines: 9

One major 'human' problems with expiring of passwords: The imperfect human
memory. Here at work I have various accounts on various systems requiring
about half a dozen different passwords. I also have passwords on Prodigy
and a couple of local BBS's. And then of course there are a multitude of
ATM access passwords. It's nearly intolerable without the added insanity
of being forced to change my passwords at unexpected times. In my personal
opinion, with the ever increasing number of systems I must access, passwords
in general are no longer an acceptable method of controlling access to
systems. We need something better and we need it soon.