Give me Liberty, or give me ... give me ... I forgot

I forgot my password. Again. One of my online accounts. Of course, we all have our password schemes because it's the only way we can remember them. Writing down passwords is no-no #2, right behind using "password" as your password.

So you may ask "Why did you forget your password?". Typically I would answer "early stages of Alzheimers". However, not this time. No, it's because every stinking online web site I happen to belong to has a \*different\* password policy. And many of those passwords policies don't match my password scheme. It's a one-off. Since it's a one-off, I'll forget it. Only massive amounts of Ginseng will fix that problem. And my passwords are cryptic enough where password hints makes no sense if it doesn't match my password scheme. Here's a thought for an advertising campaign.

With your Online Account you will receive a lifetime supply of Ginseng

Hey, I would go for that, although admittedly I would probably pick the online account with the "schwing" drug first.

Hey, online account dudes/dudettes, we need Project Liberty support sooner rather than later. While Liberty can do much more than web single sign-on, that alone would be a good start. We customers would be happy. You dudes/dudettes would save a boatload of "I forgot my password" budget. Win-Win.


Oi. Try caffeine for drugs.
Also, why not just save passwords in a text file on an encrypted disk image? Or at least the hints?
I know, I know. I'd still guess it's more secure than getting a new one (or even the normal password) sent in an unencrypted mail running over a few MS Exchange instances in the process, like very many (most?) sites still do.

Posted by Bernd Haug on January 20, 2005 at 07:11 PM PST #

What? Me? Caffeine? Hey, I'm at Starbucks right now sucking down a cup-o-joe. Lateley I have been getting de-caf about 80% of the time. Today it's caffeine. Need the "oomph" this morning.

Hmmmm. I'll have to think of the encrypted file on disk. Doesn't meet the convenience or functionality of Liberty, nor does it come with a lifetime supply of Ginseng, but it will solve the immediate problem.

Posted by John Clingan on January 20, 2005 at 09:40 PM PST #

John, you know there is a company out there that is selling CPU cycles per hour?
Now, food for thought, I use the mozilla feature of storing the usernames and passwords of the Websites I access. Imagine that company starts selling MB per month of disk space exported via NFS?
I could point my browser configuration to the remote disc where all my user profile is stored. Everywhere on the Internet I could access my personal address book, my encripted passowrds, my browser bookmarks, etc, etc with a monthly fee.
Yes, I know the idea could use some more work but, I'd buy that for a dolar. With a decent implementation of Java Portal server (with lots of security and the kind of bandwith you have in the US) I could even start using Openoffice via web and store my sxw in one place accessible via Internet.
Maybe Johnathan is already thinking about it, It would be a nice step in the comoditizing services direction

Posted by Jaime Cardoso on January 20, 2005 at 10:14 PM PST #

Jaime, that CPU/hour thing, what a novel idea!? :)

Right now I am looking at a Password Manager

FYI, the 2nd phase of Liberty addresses the idea of a global preferences repository. Identity Service Providers can leverage the CPU/Hour.

Posted by John Clingan on January 20, 2005 at 10:41 PM PST #

It will be interesting to see the business models around $/month storage. A lot of dot-gones tried free as a business model. Streamline has been in the press lately for offering 10GB storage for free, the catch is you can only download 100MB/month for free. Clearly ease of use will drive the next level of network storage, NFS accessible with the Liberty ID from my JavaCard would be a good start.

Posted by Marc Hamilton on January 21, 2005 at 12:19 AM PST #

John, I've got a Treo 600 and am using 3nity to store my passwords. Works very well.

Posted by Gary Kephart on January 25, 2005 at 10:53 AM PST #

Gary, thanks! I am currently using a java desktop app, but the idea of backing up the database as a part of a sync sounds like a good idea. Of course, I should probably back up my laptop on a regular basis ...

I'll take a look.

Posted by John Clingan on January 25, 2005 at 11:10 AM PST #

Post a Comment:
  • HTML Syntax: NOT allowed

John Clingan-Oracle


« July 2016