<?xml version='1.0' encoding='UTF-8'?><?xml-stylesheet href="http://www.blogger.com/styles/atom.css" type="text/css"?><feed xmlns='http://www.w3.org/2005/Atom' xmlns:openSearch='http://a9.com/-/spec/opensearchrss/1.0/' xmlns:georss='http://www.georss.org/georss' xmlns:gd='http://schemas.google.com/g/2005' xmlns:thr='http://purl.org/syndication/thread/1.0'><id>tag:blogger.com,1999:blog-5369629723021745680</id><updated>2011-11-27T18:56:17.180-05:00</updated><category term='password'/><category term='welcome info security'/><title type='text'>Fubar Security</title><subtitle type='html'>Disband computer security practices</subtitle><link rel='http://schemas.google.com/g/2005#feed' type='application/atom+xml' href='http://fusec.blogspot.com/feeds/posts/default'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/5369629723021745680/posts/default?max-results=100'/><link rel='alternate' type='text/html' href='http://fusec.blogspot.com/'/><link rel='hub' href='http://pubsubhubbub.appspot.com/'/><author><name>Ashish</name><uri>http://www.blogger.com/profile/03245280252760734079</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><generator version='7.00' uri='http://www.blogger.com'>Blogger</generator><openSearch:totalResults>2</openSearch:totalResults><openSearch:startIndex>1</openSearch:startIndex><openSearch:itemsPerPage>100</openSearch:itemsPerPage><entry><id>tag:blogger.com,1999:blog-5369629723021745680.post-1146920444392923504</id><published>2008-01-13T17:47:00.000-05:00</published><updated>2008-01-13T17:53:15.702-05:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='password'/><title type='text'>Changing password considered harmful for your health</title><content type='html'>When did you last change your car keys?&lt;br /&gt;When did you last change your house keys?&lt;br /&gt;&lt;br /&gt;Why do you want people to change their passwords?&lt;br /&gt;Your house keys and car keys asset wise are more valuable than your password, unless you are over 50 yrs old, at which point changing anything is pointless.&lt;br /&gt;&lt;br /&gt;My point. People don't like change. Don't ask them to change their password.&lt;br /&gt;A password is just a to deter someone from  attempting to do something malicious.&lt;br /&gt;Instead apply server side changes to detect malicious activity or put compensating controls so the user is not hurt. There are options, try them first.&lt;br /&gt;&lt;br /&gt;Most people end up using 3-4 passwords for pretty much everything. Remember 4+-3 is the magic number of things you can remember, this applies to passwords as well.&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5369629723021745680-1146920444392923504?l=fusec.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://fusec.blogspot.com/feeds/1146920444392923504/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://www.blogger.com/comment.g?blogID=5369629723021745680&amp;postID=1146920444392923504' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/5369629723021745680/posts/default/1146920444392923504'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/5369629723021745680/posts/default/1146920444392923504'/><link rel='alternate' type='text/html' href='http://fusec.blogspot.com/2008/01/changing-password-considered-harmful.html' title='Changing password considered harmful for your health'/><author><name>Ashish</name><uri>http://www.blogger.com/profile/03245280252760734079</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:total>0</thr:total></entry><entry><id>tag:blogger.com,1999:blog-5369629723021745680.post-4216535480400240702</id><published>2008-01-13T17:10:00.000-05:00</published><updated>2008-01-13T17:18:40.031-05:00</updated><category scheme='http://www.blogger.com/atom/ns#' term='welcome info security'/><title type='text'>Welcome to fusec</title><content type='html'>My goal of this blog is promote the fundamental changes in computer security by applying a business viewpoint. The goal is to get rid of some of the common practices that exist within the industry as most people have started "quoting" web sites in their decision making.&lt;br /&gt;Why fusec?  In honor of &lt;a href="http://en.wikipedia.org/wiki/Fubar"&gt;Fubar &lt;/a&gt;(Foobar).&lt;div class="blogger-post-footer"&gt;&lt;img width='1' height='1' src='https://blogger.googleusercontent.com/tracker/5369629723021745680-4216535480400240702?l=fusec.blogspot.com' alt='' /&gt;&lt;/div&gt;</content><link rel='replies' type='application/atom+xml' href='http://fusec.blogspot.com/feeds/4216535480400240702/comments/default' title='Post Comments'/><link rel='replies' type='text/html' href='http://www.blogger.com/comment.g?blogID=5369629723021745680&amp;postID=4216535480400240702' title='0 Comments'/><link rel='edit' type='application/atom+xml' href='http://www.blogger.com/feeds/5369629723021745680/posts/default/4216535480400240702'/><link rel='self' type='application/atom+xml' href='http://www.blogger.com/feeds/5369629723021745680/posts/default/4216535480400240702'/><link rel='alternate' type='text/html' href='http://fusec.blogspot.com/2008/01/welcome-to-fusec.html' title='Welcome to fusec'/><author><name>Ashish</name><uri>http://www.blogger.com/profile/03245280252760734079</uri><email>noreply@blogger.com</email><gd:image rel='http://schemas.google.com/g/2005#thumbnail' width='16' height='16' src='http://img2.blogblog.com/img/b16-rounded.gif'/></author><thr:total>0</thr:total></entry></feed>
