CNBC's secure password tutorial sent your password in the clear to 30 advertisers

[redesigned]

@doop

Sounds like it was a pretty good lesson in password security.

this comment wins the thread!

i do have to say that this is just another classic example of how the human link is the weakest link in any security chain.

[Nonentity]

@doop

Sounds like it was a pretty good lesson in password security.

Sadly, those who needed the lesson most are probably the least likely to find out about it.

[shaddack]

[brzap]

@Medievalist

if you type your discourse password in bOINGbOING, it shows up as plaintext to you, but everybody else just sees a row of asterisks

hunter2

Edit: it didn’t work! I think it only works on slashdot.

[Garymon]

@doop

Sounds like it was a pretty good lesson in password security.

You know it’s a good class when the teacher learns as well as the students.

[ficuswhisperer]

@Medievalist

Did y’all know that if you type your discourse password in bOINGbOING, it shows up as plaintext to you, but everybody else just sees a row of asterisks? Look, here’s mine!

---

Try it, it’s fun!*

@brzap

*******

Edit: it didn’t work! I think it only works on slashdot.

It did work!

I’ll try mine:

!D0naldTrump4Pr3zPlz!

[Garymon]

I cried a little as I saved this comic. Should get some good use from me down the road.

[anon36081309]

[MadLibrarian]

I guess ‘AngryPelican’ might be a reasonable password…

[peter_bailey]

I recently told a DBA to change a database query to add:
VendorCode in (‘123’, ‘INSERT OTHER VENDOR CODE HERE’)

When it didn’t work, I remoted in to find that exact phrase.

[daneel]

Well, it was.

DAMMIT.

[Ignatius]

@mkanoap

So the next time she got “ChangeThisPasswordRightNowWendyYouMUSTChangeItToSomethingNewBeforeUsingTheServer.”

A few months later I was in the room when she had to upload something and she complained that the password I gave her was so long to type every time.

Next time, set it to ToChangeMyOwnPasswordIWill<DescribeMethodHere>WhichIsTotallyLessAnnoyingThanTypingThisForTheNextSixMonths

[L_Mariachi]

I have had that exact same experience. More than once.

[TobinL]

@mkanoap

A few months later I was in the room when she had to upload something and she complained that the password I gave her was so long to type every time.

Wow the worst I did was set a password to ‘bonehead’ when I got asked if I could reset a password for a bonehead user who forgot what it was… They should not give me such easy openings.

[Skeptic]

@Medievalist

Did y’all know that if you type your discourse password in bOINGbOING, it shows up as plaintext to you, but everybody else just sees a row of asterisks? Look, here’s mine!

---

Try it, it’s fun!*

If the asterisks don’t show up I hear you can just use White Out on your screen to cover up the password. (Ask codinghorror for the bbcode for White Out if you don’t have any at home… )

[Soilzero]

adds ‘eat/a/bag/of/dicks’ to list of passwords to check first

What was that about 180 billion years?