dcid's comments

On: Analysis of the Gawker compromise

[dcid]

Checking if any of my emails is in the list there... Do I have an account there? Don't know.

What is funny is that I never remember where I have accounts now...

[sucuri2 → dcid]

That's the problem. People create the account once to post a comment and don't think about it anymore.

Since every site asks for a user/pass, people re-use their passwords, escalating the problem of a compromise.

If openid was a bit more easy to use for the end-user, this wouldn't be an issue...