For usability’s sake, don’t use passwords

Password strength/complexity has been a longtime annoyance of mine since back in my help desk days at the University of Guelph. It’s not so much users choosing crappy passwords that bothers me, but rather how websites, apps, etc determine how “strong” your password is and their suggestions to improve it.

I know that many experts have pure intentions when they make suggestions like “to make it more secure replace letters with special characters” or “use a non-dictionary word to stump hackers” but it doesn’t help the end-user remember their more secure password.

All that adding that complexity to the password does is force the user to create a password different from their “standard password” they use for all their other sites which they will either:

  1. Forget and need to reset or call tech support
  2. Write down on a sticky note attached to their computer/workspace

This was a problem at my University as well as at a place I worked a long time ago. It’s frustrating to the users and also, when there is problems resetting the passwords, the admins/support staff. I just read and older article, The Usability of Passwords, at Baekdal and it definitely inspired this post. The article makes an excellent point about strength vs complexity, which is to say that a complex password( ie: “J4fS<2″) is not necessarily stronger than one that is “simpler” (ie: “this is fun”).

note: Amazingly “this is fun” is actually 10x more secure than “J4fS<2″, taking 2,537 years using a common word attack compared to “J4fS<2″ which takes a mere 219 years ;)

I think, after reflecting a bit, that one small and simple problem here is the use of the term “password”. By saying password, the term “word” is ingrained in our minds. “this is fun” is not a word, so maybe we’d have stronger security if we started asking our users for pass-phrases.

What do you think?

Posted in Technology, Usability | Leave a comment

My time so far in Buenos Aires

I haven´t had time to email everyone so I figured I´d do what I rarely do and write in this damn blog.

Things have been a bit difficult at times, but amazing so far. For one thing, I definitely underestimated the language barrier. It´s been a while (about 3 years…?) since I was in a country that didn´t speak a language that I spoke, and I guess I had forgotten what it was like. I had assumed a lot of things:
Everyone would speak at least a little English, Spanish is similar enough to French that they´ll understand you, and finally, that I can get by with hand gestures alone :) So lets address those one by one, shall we? Nope, nope and nope.

Very few people in Argentina can speak any English, even the younger generation! This was surprising to me not because I´m incredibly ethnocentric, though that´s a possibility, but I guess because when I was in Korea all the students had to take English much in the same way we take french but they took it through public school as well as high school.

The Frech-Spanish similarity is actually not so far fetched, some words are similar enough, but not to the extent that I understand what the hell anybody is saying. If I hadn´t started listening to a speak spanish mp3 class thing I´d definitely be completely clueless.

There´s a joke to preface the third. If an Argentinian falls off a boat without a lifejacket, how do you keep him afloat? Keep talking to him. Buh-dum bum.. Argentinians are very expressive with their hands and actually have a sizable gesture-vocabulary. So when a Canadian guy comes bumbling along, gesturing wildly like a gorilla having a seizure, they are completely lost, bewildered and most likely scared they´re going to get knocked silly by a flailing limb.

Despite the communication problems though things have been amazing. The weather has been amazing, the men are incredibly friendly and helpful (women tend to avoid eye-contact oddly enough, I guess I look like a sexual predator…) and I´ve met some incredible people.

This past Saturday I went to a bboy jam that was partially organized by the crew I´ve been hanging out with, United Rockers Crew. Christian, the bboy that I met off of www.bboyworld.com that certain co-workers assumed was going to rape me/harvest my organs, was DJing the event and Rafa was judging. Their crew was entering the battle and were a man short so they asked me to battle with them. Despite having sprained my ankle about 4 days prior and again the day before I was feeling up to it and Christ was playing some good tunes so I couldn´t help but join them.

It was a bit crazy because some of the other crews there were absolutely amazing. URC´s rival crew, LACREW, were in the opposite bracket to us  and got eliminated in the semis in one of the most intense battles I´ve seen live since Rivers vs Mind 180 in S. Korea. It was a shame Lacrew lost because I really wanted to face them in the finals, I really liked their style and they had incredible blowups and power, even if they had a bit of a bad attitude while battling. So when we got to the finals the crew that had just barely beat Lacrew (it was a crazy close battle) had used most of their power and blowups already. We were able to control most of the battle using the commandos and routines we had come up with before the battle started and it worked because we got a unanimous victory from the 3 judges :D My ankle is suffering for the victory but it was worth it and it seems to be healing up.

Anyways, I´m off to Corrientes today for a crazy boatride through the wetlands and then off to Iguassu afterwards to see their world-famous waterfall(s).

Peace!

Posted in bboying, My Life, Travel | 4 Comments

Crash Crew’s rocking on your radioooooo

I’ve always been a huge fan of old school rap from 80s (as early 80s as possible) and my awesome buddy/coworker Vince got me onto this track recently. It is the new/old hotness.

Crash Crew – On the radio

I figure while I’m on an old school hip hop tip I might as well share my two favourite tracks of all time.

Fearless Four – Rocking it

The Sequence – Funk you up

Posted in My Life | Leave a comment