Firstly, there is no-one who ever legitimately needs your password. If they are legit, then they have access of their own.

Secondly, I've been using the song trick for a few years now, but I would never disclose which song I'm using. In this day and age, putting your Led Zep lyrics up is almost as bad as the traditional post-it under the desk.

Having said that, there's a lot of sense in your article. It'll probably do some good.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/245/26455#26455