Whatever method you choose, the brilliant and unscrupulous out there will work around, eventually. Then the unscrupulous and connected to the internet will try to copy what the first group just have to brag about(see script kiddies). It is simply a matter of trying to stay ahead of the curve, in my opinion. The main problem is that by the time some new method has the kinks worked out properly, it is understood by the aforementioned unscrupulous people bright enough to find and exploit the weaknesses. I'll keep my passwords in my head, thanks.

Just remember, you aren't being paranoid if they really are out to get you. (Who said that first, by the way...)

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/277/29257#29257