Mike Macgirvin
Diary and Other Rantings
Beyond Silicon Valley
   
Friday, Jul 04 2008, 03:50 pm
Dec 12, 2005
ID theft

Something that has really been starting to intrigue me is the potential for wanton internet identity theft. It works like this... you go to a cool new site and sign up with a username and password. Just like the other hundreds of sites you belong to. But unless the site has imposed a particular username on you (your first choice was already in use), aren't you going to use your 'standard login'? Same thing on Amazon, Google, eBay and everywhere else? Don't lie. Everybody does. And that's why it is interesting.

What about on stinkinidiotsinweirdclothes.com ? Wouldn't you use your standard login there as well? If you're like most people, of course you would. Do you know who has access to the database? Do you trust him/her/them? One well-placed internet site could collect thousands of logins. Every one of them would probably be good on 10-100 major sites and thousands of smaller ones. Credit cards, shopping, bank accounts. It's probably a hundred times as effective as a phishing scam.

Now that you're aware of the problem, what can you do about it? Start changing your passwords! Change something - anything. (Perhaps) add the first character of the site name into your standard password. The only thing that's preventing this from being a global crisis is that nobody has sufficiently exploited it for personal gain (yet).
Categories: software
Comments:

Joe (Derek Joe Tennant)
December 12, 2005 21:41
Joe
I have one password for email and financial accounts, and a different username/password for all the unimportant stuff. Saves having a crib sheet that someone might find, with all 100 permutations of passwords, but keeps the important ones from ending up goodness knows where....

Comments? | More Actions Open/Close menu
Back
Apples have meant trouble since eden.
-- MaDsen Wikholm, mwikholm@at8.abo.fi