I've dropped that computer several times, and the hinge is broken. So, a lot of that is my fault. Plus the thing is now 5 years old, and the Applecare warranty was superb while it lasted.
Even if macs broke as frequently as PCs do (which they don't - although I suspect they have become less durable of late), they would still be better. So it doesn't really matter.
My apt and my downstairs neighbors were broken into yesterday. They took my G5 iMac, my iPod and my fucking Bose SoundDock. They left his Gateway PC, his stereo and his giant television. They also left my crappy little dvd player and my violin. That, by the way, is the only thing that makes me sure my neighbor didn't do it himself. He would have taken or at least broken the violin, definitely.
Gee, sorry your computer was taken. But congratulations on retaining your instrument -- they are more fun than machines anyway, and often dearer to replace.
The good thing is that my two big freelance projects are totally backed up at work, and I'm happy that I never got around to installing much software. I'm sure they'll get it elsewhere if they want it, but at least I'm not making it easy for them. although whoever gets it will probably just end up using it for games or some shit. I hope. I had my credit card and bank acct websites bookmarked, but the accounts are password protected. anyone have an informed opinion on whether that stuff is safe?
no, I don't think so -- you mean where a pop-up pops up and says "I can store this password for you if you like"? No. Thank goodness.
Can you tell I'm the ultimate End-User? I also have to call apple help and make sure my email doesn't keep going to that computer. Oh shit! and paypal! fuck!
I had my passwords all written out on a piece of paper in the desk-drawer, although in abbreviated form. Fortunately the burglar was in too much of a hurry to go through the desk.
For really sensitive stuff, browser storage is starting to look like a bad idea.
also, if you found the unfogged bookmark and are reading this, you asshole, the list is not there anymore. also you forgot the pen that goes with the wacom tablet, but I hid it, so fuck you.
I'd still suspect the downstairs neighbor; I don't know what happens to stolen computers (do they go to chop shops like cars?) but I imagine it would be easier to get rid of a PC or a TV.
Sorry to hear that, but at least your work is backed up. I'd change the passwords on everything that you had bookmarked.
oh no! maybe I'll just get a safe deposit box. You're right, of course--it's just that leaving anything in the house feels a bit unsafe at the moment. I'm sure the sensation will pass.
Have you considered the possibility, SB, that Bruce Schneier is ON CRACK? People can remember a long, complicated password. I wonder: if you were to keep your password for work in your wallet, and lose it, whether the company could sue you if you had done so in contravention of their stated policy. And it really does seem like a particularly bad idea, given that you might have a business card that would likely include your company's domain, and credit cards, which would point the thief right to your online account, if they were inclined to go there. Pick one, two, or three complex passwords and commit them to memory.
if you were to keep your password for work in your wallet, and lose it, whether the company could sue you if you had done so in contravention of their stated policy
I like your feigned ignorance, my little utility pipe, but let's say at least twelve characters, and including mixed case letters, at least one number, and at least one punctuation mark. One handy trick for people who have bad memories: use compound words, with both elements spelled incorrectly, eg, Mirkin.boyy5
It won't help if your laptop is stolen, but Password Safe is at least better than a sticky note.
Another good secure password-remembering strategy is the first letter from each word in a song lyric, converting some letters to numbers of symbols (a->@, e->3, etc.)
but let's say at least twelve characters, and including mixed case letters, at least one number, and at least one punctuation mark.
I wasn't feigning ignorance: I just wanted to be certain we agreed on our terms, which we do, so huzzah. Anyhow, memorizing three of those is fine, especially if you type each one at least once daily. But I really think that these days, when you can't wipe your nose without an account at kleenex.com, people are going to need more than three passwords, many of which they won't use often enough to burn into their muscle memory. (I don't advocate a unique password for each account, but even if we figure one for each level of life-ruining ability, I'm pretty sure most people will need more than three.) Maybe we can strike a compromise: memorize your work and bank passwords, and write the rest down.
Because there are more ways than just dictionary attacks to get ahold of someone's password. Suppose someone exploits a bug in some server software, and sees your password zipping past. Oops, that's the same password you use for distinct security domains X, Y, and Z. Better to have your life ruined in just one way than four.
Sure, but it's a very unlikely scenario that would have someone target a particular individual, know which sites that person uses, and then crack one of them. It's more likely that they manage to sniff your info as it flies across the network, but then they wouldn't know about any of your other accounts. As long as you find out in some reasonable amount of time that one account has been compromised, no biggie.
I don't mean to be argumentative; memorizing works for most people, but not all. And no one really has different passwords for all their different accounts. But carrying passwords in your wallet still seems like a terrible idea.
And no one really has different passwords for all their different accounts.
I probably have over 10 passwords but a few passwords are for more than one site. None are written down, but I've kept a few in one of my e-mail accounts. This has generally worked out for me because of the way I've chosen most of the passwords, but I still end up clicking on the "forgot your password?" links at various places more often than I want to.
I have about eight different passwords. Each of them is a date that I want to remember with an acronym. If my Unfogged code were "DoA2004," my "Hi Burglars!" note would read, "Unfogged--Arafat." (My actual mnemonics are of course more interesting to only myself.)
Right, live it up.
Posted by ogged | Link to this comment | 01- 2-06 10:25 PM
Ogged,
I've dropped that computer several times, and the hinge is broken. So, a lot of that is my fault. Plus the thing is now 5 years old, and the Applecare warranty was superb while it lasted.
Posted by bostoniangirl | Link to this comment | 01- 3-06 8:35 AM
Even if macs broke as frequently as PCs do (which they don't - although I suspect they have become less durable of late), they would still be better. So it doesn't really matter.
Posted by silvana | Link to this comment | 01- 3-06 8:45 AM
Every computer dies. Not every computer... really lives.
Posted by enigmania | Link to this comment | 01- 3-06 11:12 AM
For some reason comment 4 reminds me of Deepak Chopra, the famous rapper.
Posted by Standpipe Bridgeplate | Link to this comment | 01- 3-06 11:26 AM
standpipe, rtsp is not a registered protocol.
Posted by mcmc | Link to this comment | 01- 3-06 12:26 PM
Here's a working link (funny part follows KCRW self-promotion).
Posted by Standpipe Bridgeplate | Link to this comment | 01- 3-06 4:25 PM
I found that unreasonably funny when I heard it on the year in rebuke.
Posted by slolernr | Link to this comment | 01- 3-06 4:32 PM
Yes! I was driving when I heard it, and as the "timeless clocks" bit unfolded I would have happily plowed into a tree, it was so suddenly awesome.
Posted by Standpipe Bridgeplate | Link to this comment | 01- 3-06 4:53 PM
Burglars prefer apple products!
My apt and my downstairs neighbors were broken into yesterday. They took my G5 iMac, my iPod and my fucking Bose SoundDock. They left his Gateway PC, his stereo and his giant television. They also left my crappy little dvd player and my violin. That, by the way, is the only thing that makes me sure my neighbor didn't do it himself. He would have taken or at least broken the violin, definitely.
Posted by mcmc | Link to this comment | 01- 4-06 9:07 AM
Oh no! mcmc, that really, really sucks. Losing my computer is a big nightmare of mine. Sorry. Man. Suckage.
Posted by silvana | Link to this comment | 01- 4-06 9:09 AM
Gee, sorry your computer was taken. But congratulations on retaining your instrument -- they are more fun than machines anyway, and often dearer to replace.
Posted by Jeremy Osner | Link to this comment | 01- 4-06 9:12 AM
The good thing is that my two big freelance projects are totally backed up at work, and I'm happy that I never got around to installing much software. I'm sure they'll get it elsewhere if they want it, but at least I'm not making it easy for them. although whoever gets it will probably just end up using it for games or some shit. I hope. I had my credit card and bank acct websites bookmarked, but the accounts are password protected. anyone have an informed opinion on whether that stuff is safe?
Posted by mcmc | Link to this comment | 01- 4-06 10:21 AM
Were the passwords stored in your browser?
Posted by Jeremy Osner | Link to this comment | 01- 4-06 10:25 AM
no, I don't think so -- you mean where a pop-up pops up and says "I can store this password for you if you like"? No. Thank goodness.
Can you tell I'm the ultimate End-User? I also have to call apple help and make sure my email doesn't keep going to that computer. Oh shit! and paypal! fuck!
Posted by mcmc | Link to this comment | 01- 4-06 10:38 AM
That's good. I am currently rethinking my de facto policy of storing all my passwords inside the browser.
Posted by Jeremy Osner | Link to this comment | 01- 4-06 10:42 AM
I had my passwords all written out on a piece of paper in the desk-drawer, although in abbreviated form. Fortunately the burglar was in too much of a hurry to go through the desk.
For really sensitive stuff, browser storage is starting to look like a bad idea.
Posted by mcmc | Link to this comment | 01- 4-06 10:55 AM
also, if you found the unfogged bookmark and are reading this, you asshole, the list is not there anymore. also you forgot the pen that goes with the wacom tablet, but I hid it, so fuck you.
Posted by mcmc | Link to this comment | 01- 4-06 1:21 PM
Probably a good idea anyway, I guess, to go around to such sites and change the passwords. Just in case.
Posted by Jeremy Osner | Link to this comment | 01- 4-06 1:29 PM
Maybe I should rethink the piece of paper posted above my desk with all my passwords and numbers on it labelled "Hi Burglars!"
(I'm not kidding, unfortunately. Okay, it's going in a drawer right now.)
Posted by Jackmormon | Link to this comment | 01- 4-06 1:39 PM
I'd still suspect the downstairs neighbor; I don't know what happens to stolen computers (do they go to chop shops like cars?) but I imagine it would be easier to get rid of a PC or a TV.
Sorry to hear that, but at least your work is backed up. I'd change the passwords on everything that you had bookmarked.
Posted by Cala | Link to this comment | 01- 4-06 1:44 PM
Jackmormon--I'm so paranoid right now that I'm carrying the list around in my wallet.
Cala, the choice may have been influenced by portability. Or it may actually have been my crrreeepy neighbor or one of his creepy friends.
Posted by mcmc | Link to this comment | 01- 4-06 2:04 PM
carrying the list around in my wallet seems like a particularly bad idea. At least if it lists user id's along with passwords.
Posted by Jeremy Osner | Link to this comment | 01- 4-06 2:05 PM
oh no! maybe I'll just get a safe deposit box. You're right, of course--it's just that leaving anything in the house feels a bit unsafe at the moment. I'm sure the sensation will pass.
Posted by mcmc | Link to this comment | 01- 4-06 2:10 PM
carrying the list around in my wallet seems like a particularly bad idea.
Computer security expert Bruce Schneier says otherwise. You're good, mcmc.
Posted by Standpipe Bridgeplate | Link to this comment | 01- 4-06 2:25 PM
Have you considered the possibility, SB, that Bruce Schneier is ON CRACK? People can remember a long, complicated password. I wonder: if you were to keep your password for work in your wallet, and lose it, whether the company could sue you if you had done so in contravention of their stated policy. And it really does seem like a particularly bad idea, given that you might have a business card that would likely include your company's domain, and credit cards, which would point the thief right to your online account, if they were inclined to go there. Pick one, two, or three complex passwords and commit them to memory.
Posted by ogged | Link to this comment | 01- 4-06 2:35 PM
if you were to keep your password for work in your wallet, and lose it, whether the company could sue you if you had done so in contravention of their stated policy
Um, if you worked for a bunch of dicks, maybe.
Posted by Anonymous | Link to this comment | 01- 4-06 2:40 PM
Yeah, me.
Posted by SomeCallMeTim | Link to this comment | 01- 4-06 2:41 PM
I'm not unreceptive to your point of view, ogged, but before we go further, what do you mean by "long" and "complicated"?
Posted by Standpipe Bridgeplate | Link to this comment | 01- 4-06 2:41 PM
what do you mean by "long" and "complicated"?
I like your feigned ignorance, my little utility pipe, but let's say at least twelve characters, and including mixed case letters, at least one number, and at least one punctuation mark. One handy trick for people who have bad memories: use compound words, with both elements spelled incorrectly, eg, Mirkin.boyy5
Posted by ogged | Link to this comment | 01- 4-06 2:47 PM
Mirkin.boyy5
Jesus, have to change that one now.
Posted by Standpipe Bridgeplate | Link to this comment | 01- 4-06 2:51 PM
It won't help if your laptop is stolen, but Password Safe is at least better than a sticky note.
Another good secure password-remembering strategy is the first letter from each word in a song lyric, converting some letters to numbers of symbols (a->@, e->3, etc.)
Posted by Becks | Link to this comment | 01- 4-06 2:53 PM
but let's say at least twelve characters, and including mixed case letters, at least one number, and at least one punctuation mark.
I wasn't feigning ignorance: I just wanted to be certain we agreed on our terms, which we do, so huzzah. Anyhow, memorizing three of those is fine, especially if you type each one at least once daily. But I really think that these days, when you can't wipe your nose without an account at kleenex.com, people are going to need more than three passwords, many of which they won't use often enough to burn into their muscle memory. (I don't advocate a unique password for each account, but even if we figure one for each level of life-ruining ability, I'm pretty sure most people will need more than three.) Maybe we can strike a compromise: memorize your work and bank passwords, and write the rest down.
Posted by Standpipe Bridgeplate | Link to this comment | 01- 4-06 3:12 PM
Why, if the passwords are long and complicated, would you need more than three?
Posted by ogged | Link to this comment | 01- 4-06 3:15 PM
Because there are more ways than just dictionary attacks to get ahold of someone's password. Suppose someone exploits a bug in some server software, and sees your password zipping past. Oops, that's the same password you use for distinct security domains X, Y, and Z. Better to have your life ruined in just one way than four.
Posted by Standpipe Bridgeplate | Link to this comment | 01- 4-06 3:23 PM
Sure, but it's a very unlikely scenario that would have someone target a particular individual, know which sites that person uses, and then crack one of them. It's more likely that they manage to sniff your info as it flies across the network, but then they wouldn't know about any of your other accounts. As long as you find out in some reasonable amount of time that one account has been compromised, no biggie.
I don't mean to be argumentative; memorizing works for most people, but not all. And no one really has different passwords for all their different accounts. But carrying passwords in your wallet still seems like a terrible idea.
Posted by ogged | Link to this comment | 01- 4-06 3:31 PM
And no one really has different passwords for all their different accounts.
I probably have over 10 passwords but a few passwords are for more than one site. None are written down, but I've kept a few in one of my e-mail accounts. This has generally worked out for me because of the way I've chosen most of the passwords, but I still end up clicking on the "forgot your password?" links at various places more often than I want to.
Posted by eb | Link to this comment | 01- 4-06 3:43 PM
I have about eight different passwords. Each of them is a date that I want to remember with an acronym. If my Unfogged code were "DoA2004," my "Hi Burglars!" note would read, "Unfogged--Arafat." (My actual mnemonics are of course more interesting to only myself.)
Posted by Jackmormon | Link to this comment | 01- 4-06 3:55 PM
Re. stolen laptop, I'd change my passwords anyway. Might not the burgler figure out a way to hack into your keychain?
Re. passwords, I'm with Ogged: one for X kind of site (e.g., newspapers), one for Y (blog-related stuff), and so on.
Posted by bitchphd | Link to this comment | 01- 4-06 4:05 PM
one for X kind of site (e.g., newspapers), one for Y (blog-related stuff), and so on.
I didn't think this was in dispute.
Posted by Standpipe Bridgeplate | Link to this comment | 01- 4-06 4:11 PM
Oh, I didn't think it was either, I was just explaining how the "people only need a few passwords" argument works in (my) practice.
Posted by bitchphd | Link to this comment | 01- 4-06 4:23 PM
Gotcha.
Posted by Standpipe Bridgeplate | Link to this comment | 01- 4-06 4:24 PM
oh my god. what is a keychain? (if it's laptop specific I don't feel quite so dumb.)
Posted by mcmc | Link to this comment | 01- 4-06 7:18 PM