The Dirty Truth About Web Passwords

Excellent post Jeff. There are site like digg.com also stores user password. Gawker isa perfect example for them to learn!

Great article.
I like the “internet driving license”.
I need to change some passwords.

And I logged here with twitter :slight_smile:

I hate OpenID and I think its a crazy idea to centralize all your security and identity with one provider. OpenID is like a passport, and sites like stackoverflow and this blog are like walmarts and dollarstores. I shouldn’t have to show my ultimate passport ID for the most trivial transactions (buying a bag of chips, for eg).

Jeff, listen to the people, don’t be arrogant and please offer local passwords. You sound like google when they didn’t want to add a Delete button to gmail because they thought they knew better than their users. Some people just aren’t interested in maintaining a consistent, proper and centralized on-line identity, especially not with sites they use very very occasionally (like stackoverflow, for eg).

Posted via the openid host at http://openid.aliz.es/ - whoever made that is my hero of the day.

Great openid.aliz.es, really proved who I am to make a post.

We also could throw the internet away and design a new one, and everybody could switch to it in fews days, what do you think?

How about don’t use password at all? Just pick an ID and use this as your OpenID,

http://opennoid.appspot.com/id

Owch. Double wammy of Facebook asking for real names, (and people went for that), and then using the facebook ID to log into everywhere on the internet. Privacy nightmare.

Just came across a Microsoft ‘create account’ form which fails validation when a password is supplied longer than 16 characters.

Good grief!