[FFML] [ADMIN] Password related stuff

[Larry F]

On 12/12/2010 1:36 PM, Dennis Carr wrote:
> 4c) Commit this password to memory: for three weeks, do not rely on
> your browser's ability to remember your password; rather, type it from
> that piece of paper. Every time.  After you can do it without looking
> at that piece of paper, keep going for another couple weeks before you
> destroy it (yes, DESTROY it) and commit to your browser's memory.

     If you want your password to remain safe, you should -never- save 
it in your browser.

     I'm a computer repair tech, not a hacker, but I have a software 
tool that I use almost every day which reads passwords from web 
browsers. It tells me the site URL, and the username and password 
associated with that site. I use it to save the info so that when I 
reinstall Windows, I have it if they forgot their site log-in info after 
saving it to their browser. The program is readily available for 
download and doesn't cost a cent.

     Don't bother asking me what it is. I won't tell you.

     If that kind of software is readily available for anyone who wants 
to download it, you can bet there are even more powerful tools are 
available to the bad guys. So if you really want your password to be 
safe, -always- type it in manually, or at worst save it in a file that's 
not labeled "password" and copy/paste it.