| xxxxxxxxxxxxxxxxxxxx |
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxI've forgotten my password and I can't get
on!
xxxxxYears ago there was a television show called
"Password." With the TV program
you were supplied a word, which was the password,
and were asked for another word. Today "password"
has an entirely different meaning. I think
it's another word for "hell." On
the show you were given a clue, but today,
with the new game, you aren't given a chance.
You need to provide both an ID as well as
a password. Unfortunately, you can't decline
to play this game unless you are a hermit.
xxxxxThe good news is that you set up your ID
and password once and for all, but you do
have the option to change it when you desire
or when you happen to forget either of these.
The bad news is that you can't write it down
or shouldn't record what you created. You
don't want others to see it. There's more
bad news. You have to set up more pairs of
IDs and passwords for your bank account,
internet access, Amazon account, retirement
accounts and just about anything else that
involves the business world. Moreover, some
companies may require you to change your
password every month. It gets even worse
as some businesses ask for the name of your
pet or your father's maiden name to get on
the system. "Password" used to
be fun.
xxxxxNot long ago I tried to log on to the Internet.
Usually I click on the connect button and
I'm on, but that day I got an "invalid
password" message. My password is always
there but not that day so I had to enter
it. I was 99% sure of my password but what
I keyed didn't work. I called the help desk
and was told that I could call a 900 number
for technical support, which would cost me
about $2 a minute. I was also told that I
could get a resolution to my difficulty through
an email at no expense. Unfortunately I couldn't
email anyone since I was without Internet
access, but I could use a friend's PC. I
wrote down the email address to get me out
of this predicament, and headed off to use
the resources at my local library.
xxxxxAt the library, I decided to go to the provider's
site and try my luck there. Soon I went to
the login screen, which had an option for
people who forget their password. The result
of this endeavor is that you will be emailed
your correct password. That might take time,
like days. I'll get into more helpful ideas
later but let me add that to make my life
easier, I use a four-digit number for a password
on one account and the same four digits followed
by 'XX' for another. Had I tried the latter
combination for the password initially, I
would have been home free and I would have
saved a few hours and avoided buying a new
lamp to replace the one that I threw against
the wall. I thought it would bounce back
and not break. For me, password purgatory
had evolved into password hell.
xxxxxIf you use the Internet, you have at least
two passwords to worry about. If you live
in the twenty first century, you most likely
have a dozen of those gems to remember, and
that's being conservative. I have many more
than that, but that may have to do with the
fact that though I care about the environment
and conservation, I'm a progressive. When
you count them all up, you will probably
see that you have more passwords than I have,
and that's only the tip of the iceberg, where
all passwords should go.
xxxxx
I spent over twenty years as a computer
consultant.
At one of my recent contracts, I had
close
to a dozen passwords, and they couldn't
all
be the same due to the various rules
of each
system. There was one to log on to
the PC,
a LAN password, one for my phone, another
for my email and a few more for mainframe
testing. I needed another four or five
passwords
because I had to test different systems.
If you haven't lost count, it's now
up to
about ten. To use the ATM, another
password
is required. If my funds are depleted,
I
can get dough with a cash advance,
but I
have to remember still another keyword.
For
other accounts that I haven't mentioned,
there are more passwords. I use E-Z
Pass,
so they provided two passwords, one
for Internet
access and the other if I care to use
phone
access. Here is one case where I didn't
double
my pleasure. If I want to go see my
boss,
I need a password to enter his office,
which
I've forgotten so I don't talk to him.
Still,
with so many passwords, there's a high
likelihood
that I will forget one or confuse passwords,
unless I record them somewhere.
xxxxxI eliminated many of the password problems
when I retired from consulting at the end
of 2001. I continued my third career as a
writer in earnest, and developed my own web
site, but guess what? I now have more passwords
than when I was a consultant. These evil
things seem to be following me around. I
did have some ideas that I used and can still
be helpful in this putrid password pit.
xxxxxLet us assume that we need to worry about
six passwords. How do you remember them all?
You can't write them down, as that would
defeat the purpose. Someone could find the
list and all security would be lost. With
our half dozen, there are probably that many
different systems with all their different
rules, as one system may require numbers
only, a second, letters of the alphabet only,
while a third may let you use either. One
account requires you to begin a word with
a number while a second demands that you
start with a letter. At the same time a third
system may not have a restriction in this
regard. Don't forget about the difference
between upper case and lower case, another
potential headache. One password has to be
only six characters, another from four to
eight and a third might be from five to nine
positions.
xxxxx
If things aren't confusing enough,
some systems
may not allow you to use the same letter
twice in succession. One system may
not let
you use similar words when you have
to change
passwords. I ran into that restriction
and
how the software concluded that two
different
words were similar, I couldn't figure
out.
Another system may require you to change
that magic word once a month while
another
password may only need to be changed
every
ninety days, while some systems may
allow
you to keep the same one without ever
changing
it. At one company where I worked,
different
people would change certain passwords
for
our group once a month. If you're faced
with
that scenario, just pray that they
let you
know of the alteration.
xxxxxThere are further rules, such as the password
cannot spell out the name of a New York City
taxi driver or you can't use an "O"
with a slash through it. You can't use wingdings
in your password and no obscene words are
allowed. Some businesses spoil all the fun.
On one contract, I was handed a sheet of
password rules and guidelines. One suggestion
was to take the first letter of each word
of a phase, such as "Be aware Reggie
feels television is more enjoyable,"
and use that as your magic word. This would
result in BARFTIME, but is that any easier
to remember than YQSKPHW, which I got by
randomly hitting keys in front of me. Some
of you may think that that combination is
the name of a Russian diplomat. If you follow
this recommendation, you now have to remember
a different phase for each password. That
will certainly make the situation a great
deal better.
xxxxxJust when you think you have it all figured
out, the people in password security (PS)
change the rules. Banks are one of my favorite
places - more on them later - and they change
the rules more than I change my socks - well,
they don't do it everyday, but they do get
carried away. When they increase the size
of a password, they could allow existing
passwords to still work - I think that's
called grandfathering, though neither of
mine had to put up with passwords - but that
wouldn't get enough people upset. All these
changes are done because the designers want
to have so many combinations of symbols to
protect the users of the system. So then
why don't they add a requirement that you
have to use at least one Chinese character
in the password and some of the letters should
be upside down or backward? Maybe "PS"
stands for "particularly stupid."
What about having two passwords per account,
with one for days of the week ending in an
odd number and the other for even? It worked
during the fuel crisis of the 1970s.
xxxxxI wish I could say that what I described
above encompasses all the rules you will
run into, but these will surely change. What
I suggest to make our lives easier is to
standardize the rules and simplify them for
all passwords on all systems. Having fewer
rules will be beneficial. Allow numbers and
letters of the alphabet with no distinction
between upper case and lower, but don't require
either. Words that people can remember should
not be ruled out. If these combinations have
to be changed at all, make the change necessary
on January 1 and July 1 each year and no
other time.
xxxxxI may also suggest that once the rules are
made, no changes should be allowed to them
at any time. Perhaps PC's could be made more
secure so that hackers can't get anywhere
close to them. Also, why do you need a password
if you have a logon ID? When you consider
it, this combination of ID and password is
really two passwords, isn't it?
xxxxxSince my suggestions about standardization
won't be implemented soon enough for most
of us, we need another solution right now.
While consulting, I did my best by using
the same password or at least the basis -
and for the most part this worked. But one
month while doing the synchronized change,
I ran into a snag. It seems one system changed
the rules for everyone. Before, you could
use a password of six characters, but now
you had to have at least seven. This threw
a monkey wrench into my system but I solved
it by adding an 'X' at the end. A '9' would
work if you needed to have at least one number
present. Note that you can use these additional
characters at the beginning of the word just
as well, depending on the rules. To take
care of the different time requirements,
what I did was change all the words after
a month even if they didn't have to be changed.
Because of the need for an extra '9' or 'X'
for some passwords, you will need to be aware
of what goes where. Trying all combinations
will just take too long. I really think that
you need to write down something to keep
your sanity.
xxxxxMy system still wasn't foolproof but it made
the entire process somewhat manageable. Of
course, I had another concern as I had to
remember all the variations. To keep the
phone synchronized with the other stuff I
made a list of words that corresponded to
the numbers on the keypad and tried to use
easy to remember combinations such as 667667
and 333363 which translated into MORONS (appropriate,
isn't it?) and DEFEND respectively, both
valid in their system.
To accomplish this task of synchronization,
you can write a computer program -
not an
option for everyone - to translate
a six
or seven character word into the equivalent
telephone number conversion. Just decide
on the length of the word you want,
go to
the dictionary and then get all the
words
that fit. That is probably the hardest
part
as the computer program to do the conversion
is relatively simple. You can even
rule out
certain words in your program based
on restrictions
set forth. Finally print out the list
of
words and their equivalent and take
your
choice of what you think is a good
word for
the month. Just make sure your boss
doesn't
catch you doing this. He may not be
too happy,
but if he does come around, tell him
you're
doing password maintenance.
xxxxxYou can take this process one step further
and either sell others your password computer
program or the list of words. You fellow
employees can still use the program without
any software experience. Once again, be weary
of management snoops. But if you do get canned
because of your efforts, you can use the
program at your next job and even make some
cash doing this. The possibilities are almost
endless. You can to turn a troublesome situation
into a moneymaking endeavor. Don't report
these monetary gains to the IRS.
xxxxxAs grim and confusing as all these suggestions
and actions are, you have one last option:
call the security help desk. Actually, annoying
them as often as possible might be a really
good idea. Besides, you won't ever again
have to worry about forgetting any of your
passwords or writing them down - the less
paperwork, the better. This will certainly
slow down your productivity, as you may have
to wait for the security people to get back
to you. However, you get paid by the hour,
so why should you give a hoot? Just remember
to always look busy and you should be fine.
It may even cost you, but the company where
you work will wind up footing the bill. This
suggestion to frequently call the help desk
isn't worth squat if you are self-employed
or retired. Nevertheless, make every effort
to never forget your ATM password.
I think I have come up with a password
that
I hope to use for all my accounts,
everywhere:
"With_liburty_and_justice_4_awl."
It meets the requirements that you
need numbers,
letters of the alphabet and even the
caps
thing. You'll note that I changed the
spelling
of two words to thwart the hackers.
My only
concern is for the underscores and
the length.
Nonetheless, I think giving up "liberty"
is worth the security.
xxxxxIt really is amazing what we are put through
just to be productive. How can you not forget
a password every so often? When you really
think about it, the people who these magic
combinations of letters and numbers are supposed
to keep out of the system, namely the hackers,
don't have any problem with passwords. They're
in without them while the normal users are
locked out.
|
xxxxxxxxxxxxxxxxxxxx |