PINs, passwords and a feeling of high-tech disconnect - Los Angeles Times

Steve Lopez wrote a good column on Sunday complaining about the requirements for passwords.

PINs, passwords and a feeling of high-tech disconnect - Los Angeles Times:

I concur with Steve.  It does seem that there are far too many things now that require passwords.  There are some technological solutions when surfing the internet, such as using Roboform, keepass, last pass etc so you only need one password.  However that doesn't seem to solve all of the other password-protected situations, such as pins at banks, computer log-ons, voicemail services etc.  Because hackers can break simple codes, we are instructed to use very long complex passwords with upper/lower case, numbers, and symbols.  We're also told to use a different password for each occasion so that if one gets compromised all of our other accounts will still be protected. All of that makes it extremely difficult to keep track of.  The experts also suggest that we not write down the passwords because if someone finds the note, everything will be compromised.  To add insult to injury, many sites also require the passwords to be changed every 60 to 90 days.  Nobody has ever been able to explain the value of frequent password changes to me.

It seems to me that one of the best techniques is the "token" device (typically made by RSA) that generates a 6-digit code that is added (concatenated) to a fixed PIN when loggin on.  Several companies now use apps that run on smartphones that also generate 6-digit codes.  Google has their "authenticator" app, for example.

I would like to see ONE system become somewhat standard for all log-ons using some sort of a token or smartphone app.   I had hoped that RSA would have made their token technology free to all other applications, so that if someone had a token (such as from their company, or E-Trade), that they could then use that token when signing on to many other websites.  I even bought stock in RSA (which got bought out by another company).  However RSA refused to share tokens issued by one company with other companies -- so many users ended up having to carry multiple tokens on their keychain -- what a mess!  RSA also seemed to get "greedy" and began to gouge users on the price for their tokens.  They tried to emulate Gillette who famously: "Gave away razors and sold the blades." --They wanted to make a lot of money by charging high prices for a couple dollar token that needed to be replaced for new batteries every couple of years.

Because of RSA's marketing tactics, the token industry fragmented and there appears to be no really easy solution.

'

Healthcare debate lacks factual arguments against Obamacare

Michael Hiltzik had an excellent column in Sunday June 29th LA  Times Business section.

Healthcare debate lacks factual arguments against Obamacare - Los Angeles Times:

He points out how ridiculous it is that so many people seem to have a "knee jerk" negative reaction to the mention of Obamacare.  When people are asked for opinions about the various provisions of the act, they have positive responses, but when addressing the whole affordable care act they are negative.  From the statistics so far, it appears that the act has been successful.  We now have many of the people who previously were "freeloaders" now signed up and paying, at least a little bit, towards their own health care insurance.

It appears that Fox News and the other Rupert Murdoch publications as well as Conservative talk radio has been able to brainwash people into not looking at the facts in the situation.  That same group still believes in the "death panel" rumors that the right-wingers started years ago --even though there is no truth to them.

The problem with communicating the success of the program to the public is that the statistics are difficult to assemble, complicated to understand and require some serious thought.  It doesn't fit into the "sound bite" way that most Americans seem to absorb their news.

Thank you Michael Hiltzik for pointing out this problem!

$40-billion missile defense system proves unreliable - Los Angeles Times

David Willman (Pulitzer Prize winning journalist) wrote an excellent article about the problems with the US Missile Defense System.

$40-billion missile defense system proves unreliable - Los Angeles Times:



It was interesting because just the day before, I read an editorial in a few month-old copy of the MOAA magazine that complained that the Government needed to make an even stronger commitment to fully funding the Missile Defense.

I understand that missile defense is a VERY difficult engineering job.  However the efforts to develop a system has been going on for decades with only limited success.   It seems crazy to start production of a system before the R&D effort can demonstrate that they have a system that will work.  However, most of the "long poles" in the typical development are site preparation, and production of the actual launch vehicles.  The complex and risky part of the development is in the hardware and software that sits on top of the missile.  That hardware and software can often be developed quickly once the problems are solved.  So from that sense, maybe the strategy makes sense.

However, my experience in dealing with engineers in that MDA organization is that they have a very strange "culture"  I've worked with Navy, the NRO, and Air Force space programs for almost 40 years, but MDA is very different!  I think their management and risk-management system may have evolved from the Army, which has less experience with space.  -- Even when dealing with fully cleared, need-to-know associates, they tend to play their cards close to their chest, and are not open to discussion or alternatives.  I've often wondered if their management style and "culture" is what has kept them from achieving success.

Private Data Brokers Know Too Much About You - WSJ

Al Lewis, columnist for Wall Street Journal, pointed out in this article that we should not trust owners of these huge databases.

Private Data Brokers Know Too Much About You - WSJ:



The Federal Trade commission just released their report on data brokers.  I agree with the recommendations completely -- they are a good first step.

I think that the law should be expanded to cover more than just data brokers like Axiom.  It should also include every company that maintains a database that holds personally identified data.  That data includes magazine subscriptions, loyalty cards, tolling data, credit card sales, library book borrowing etc.