Picking a solid password and remembering it can be a challenge for anyone—even alleged Russian spies, as it turns out. According to Technology Review, Microsoft Researchers have thought up a new, rather interesting scheme to balance usability and security.
One of the Microsoft studies quoted by Technology Review suggests services only tend to raise password complexity requirements when they have no competition, since users can't take their business elsewhere. Government sites are cited as one example. Surprisingly, the study found no correlation between "the value of a consumer's account, the amount of attacks that the website suffered, and the complexity of the passwords that the website operators forced on their users."
With that in mind, Microsoft researchers propose a simple middle ground: allow users to pick simple passwords, but limit how many users can have the same password. That system would impede hackers who prey on popular services with large numbers of subscribers. While those services typically lock down accounts after a few erroneous login attempts, hackers still manage to break through by trying a handful of very common passwords across many accounts at once.
Don't look for revised password rules on Windows Live Mail anytime soon, though; Technology Review says Microsoft has "no plans to implement the new scheme in any Microsoft products yet." (The researchers are only looking for feedback at this point.)
I'm not a big fan of overly elaborate password requirements myself, but I'm surprised more folks don't think of using passphrases. Take a simple sentence: "I don't like long passwords." It's 24 characters long, contains upper- and lower-case letters and two non-alphanumeric characters, and isn't hard to type or remember. Microsoft's own password checker gives it top marks, too. Surely, encouraging the use of passphrases beats letting folks use "password" and "1234."
|1. Hdfisise - $600||2. Ryszard - $503||3. Andrew Lauritzen - $502|
|4. the - $306||5. SomeOtherGeek - $300||6. Ryu Connor - $250|
|7. Anonymous Gerbil - $150||8. webkido13 - $135||9. cygnus1 - $126|
|10. danny e. - $125|
|Epson's EcoTank inkjet printers axe the ink cartridge||45|
|Xbox One gets UI overhaul, DVR features in November||33|
|ROG GX860 Buzzard mouse is ready to seize some prey||21|
|SanDisk and Toshiba unveil 256Gb 3D flash chips||8|
|Sound BlasterX G5 USB DAC provides better sound to go||56|
|OS X privilege escalation exploit makes for silent-killer malware||55|
|Reports: Win10 gaming performance similar to Win8.1||88|
|The International Dota 2 Championships puts $18 million up for grabs||16|
|EVE: Gunjack brings on-rails space shooting to Gear VR||4|