Tuesday, August 21, 2007

Password 'Security'

I am continually finding myself more and more annoyed by admins, websites, etc that force you to make a 'secure' password. Now don't get me wrong, I am security conscious, and I applaud efforts to prevent easily guessed passwords, but making password requirements such as "must contain 1 uppercase and 1 lowercase letter and 1 number" are the most frustrating.

Why? Well, because it forces you to have 37 different passwords, guaranteeing you will forget it or write it down, thus defeating the 'security'. Furthermore, by making rigid requirements, they also limit what a brute force attack would have to go through to find the password. Strongly recommending such requirements would be better than forcing the user to write down the password on a stickynote.

I like GNU's password 'requirements' of "this isn't a secure password, are you sure?"

Serving who?

This article makes me mad. And I'm not even affected by it! Virginia is now charging the custodial parent (i.e. the parent owed) a $25 fee to help the parent (who obviously needs the child support or they wouldn't care) to 'help' collect the owed child support.

Justice?

Here is a better (and much more practical!) idea: all deadbeat parents in the state would have their license revoked until they pay the child support due, or at least work out a payment plan, AND they pay the $25 fee for forcing the state to go after them, and they also pay the full and normal fee associated with loosing and reapplying for their license.

Now, this plan won't help much with deadbeat parents out of state (or who suddenly decide to move out of state, but with a little encouragement, the other states might be willing to implement similar plans. I mean, if the Passport office can recoup money from deadbeat parents, surely the states can use similar means to get the owed money back.

Honestly, what deadbeat parent doesn't need a driver's license? Justice should be served, not padding pockets. JUSTICE!