<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Hacked web site shows password vulnerability</title>
	<atom:link href="http://www.theemailadmin.com/2009/02/hacked-web-site-shows-password-vulnerability/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.theemailadmin.com/2009/02/hacked-web-site-shows-password-vulnerability/</link>
	<description></description>
	<lastBuildDate>Thu, 09 Feb 2012 11:07:36 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
	<item>
		<title>By: Paul</title>
		<link>http://www.theemailadmin.com/2009/02/hacked-web-site-shows-password-vulnerability/comment-page-1/#comment-927</link>
		<dc:creator>Paul</dc:creator>
		<pubDate>Mon, 16 Feb 2009 23:59:30 +0000</pubDate>
		<guid isPermaLink="false">http://www.theemailadmin.com/?p=379#comment-927</guid>
		<description>As a counter-point to the view that passwords should always be strong, I often choose weak passwords for websites where a compromise would be inconsequential.

For example, NYTimes.com lets you register an account for access to newsletters and other features.  There is nothing in that account that is a risk to me (unlike say Paypal or online banking), so why choose a complex password?

I would predict if the NYTimes.com user database ever got cracked then we&#039;d find a lot of those passwords are pretty weak (&quot;nytimes&quot; anyone?).</description>
		<content:encoded><![CDATA[<p>As a counter-point to the view that passwords should always be strong, I often choose weak passwords for websites where a compromise would be inconsequential.</p>
<p>For example, NYTimes.com lets you register an account for access to newsletters and other features.  There is nothing in that account that is a risk to me (unlike say Paypal or online banking), so why choose a complex password?</p>
<p>I would predict if the NYTimes.com user database ever got cracked then we&#8217;d find a lot of those passwords are pretty weak (&#8220;nytimes&#8221; anyone?).</p>
]]></content:encoded>
	</item>
</channel>
</rss>

