First of all, the quote doesn't mention the questions used to derive the statistics, perhaps the answers were interpreted a little 'liberal'.
Now for my answers:
(note: I consider myself a fairly paranoid, fairly competent computer user)
Quote:
Originally posted by Mr Mephisto
Would YOU share your password like those discussed above?
|
Of course not, someone offering me a bar of chocolate is immediately suspicious (sp?), and would not hear my private password (or phone number for that matter).
Quote:
Originally posted by Mr Mephisto
Do YOU have a secure password?
|
Yes, several. They are easy to remember for me, but cannot be derived from any information about me.
Quote:
Originally posted by Mr Mephisto
Do YOU use a dictionary word for a password?
|
Yes, some of my passwords are derived from dictionary words, but resemblance (sp?) decreases with needed security. I.e. the password for my account on my GF's pc is a dictionary word, but on my own PC it only resembles a (different
) dictionary word. The root passwords to my servers are not in any way (that I know of) related to any dictionary words, and are all different.
Quote:
Originally posted by Mr Mephisto
Has one of YOUR passwords ever been compromised?
|
Sadly, yes. I did not get to the bottom of it, but my fileserver was hacked by some scriptkiddie. Apparantly a SSH bug was used, and he/she did not 'guess' my password. However the password file could've been read by him/her, and so the passwords in it were compromised.
Quote:
Originally posted by Mr Mephisto
Do YOU share a password across multiple services?
|
Yes, as I would need about 50 different passwords if I didn't. And writing them down is absolutely out of the question.
But once again, double password use decreases when the service(s) I used it for become more important.
For example, I use (nearly) the same password (and nearly the same usernames) for different file-sharing sites, like fileshack, happy puppy and the like.
Quote:
EXTRA question: Have YOU told anyone a password of yours.
|
Yes, though I made certain the password was changed (where possible) to something temporary and changed it again whenever it wasn't needed anymore. I used this for sharing dial-up accounts, and sharing files for lack of an alternative.
p.s. I made certain that my SSH daemon is up-to-date since
as it compromised several passwords, and caused me days of headaches.