Thank you for purchasing through links and ads on this site.
OWC / MacSales.com...
diglloyd Deal Finder...
Buy other stuff at Amazon.com...
Upgrade the memory of your 2018 Mac mini up to 64GB
128GB Memory in iMac 5K

Up to 128GB for 2019 iMac 5K!
Up to 64GB for 2015/2017 iMac 5K

Save nearly 50% over Apple pricing

Worst Practices at Big Web Sites

Last updated 2014-10-15 - Send Feedback
Related: how-to, security

See overview of password managers + Making a Strong (Highly Secure) Password.

The stupefying and unfortunate situation is that the very web sites for which a rigorous password should be used often require the use of low quality passwords.

Password restrictions at Schwab.com

Shown at right are the Schwab.com password restrictions as of late 2014. No more than 8 characters, no symbols or punctuation.

The restrictions mean that a good password cracker with appropriate hardware could crack many passwords in under a day (a good password cracker doesn’t proceed randomly, but by intelligent combinations of characters).

In Schwab’s defense, an account is locked after some number of failed login attempts. And if done right (Schwab does not say) the passwords would be stored as one-way hashes (only), along with appropriate 'salt' values and with the username incorporated. But with such dumbed-down password restrictions, one has to wonder if the whole thing is a swiss-cheese of worst practices.

Observe also the ludicrous and irresponsible suggestions like “kev6in” (a name with a digit in it): hacker OMG heaven. Easily guessable if the person or relative of that person is named “Kevin”. If MPG can think of it, you can bet that hackers and crackers are a lot more smart about it.

Schwab ought to be red-faced ashamed of both the limitations and the suggestions. This is security negligence, or put more diplomatically, an abject failure to follow best practices.

B&H Deal ZoneDeals by Brand/Category/Savings
Deals expire in 8 hours unless noted. Certain deals may last longer.
$2797 SAVE $600 = 17.0% $246 FREE ITEMS Nikon Z 7 Mirrorless in Cameras: Mirrorless
$2798 SAVE $400 = 12.0% Sony a7R III Mirrorless in Cameras: Mirrorless
$3498 SAVE $1000 = 22.0% Sony a9 Mirrorless in Cameras: Mirrorless
$898 SAVE $100 = 10.0% $161 FREE ITEMS Sony DSC-RX100 VA in Cameras: Point and Shoot

diglloyd.com | Terms of Use | PRIVACY POLICY
Contact | About Lloyd Chambers | Consulting | Photo Tours
Mailing Lists | RSS Feeds | Twitter
Copyright © 2019 diglloyd Inc, all rights reserved.
Display info: __RETINA_INFO_STATUS__