Common Sense Password Policies
When you overcomplicate security, you compromise user experience. When you compromise the user experience, your users have to fight back. When your users fight back, they compromise security. D’oh! We recently purchased a new car, which came with a free 3-month trial for a WiFi hotspot provisioned from an included cellular data plan. I connect to the hotspot and am then taken to an AT&T Captive portal to create an account. I’m already painfully aware that I’m likely about to subscribe to a lifetime of spam emails from AT&T, as well as consent to sending them a bunch of personal information and telemetry data about my driving habits, but as usual, I’m considering, once again, selling my privacy in the name of convenience. After entering my personal info, it’s time to provide a password for my account. No problem! I fire up my password manager, and ask it to generate a new secure password that will be used only for this service. I paste the password into the form, and voila...