Mozilla introduces Its Browser ID Project

CommanderFrank

Cat Can't Scratch It
Joined
May 9, 2000
Messages
75,399
An experimental project over at Mozilla is working toward making it easier to sign into all of your websites with a single logon password. Mozilla claims the system is completely secure, so what could possibly go wrong? :D
 
I like the idea, just not the implications if it is compromised.
 
Guiness is not a good beer.

People put their entire lives on their phones nowadays. ADT security app to unlock your house. Onstar app to unlock and start your car. Facebook for life secrets. Banking app for your money. Trading app for your life's savings. And of course the tiny collection of "music" that is the only thing the person who loses the phone is worried about when it's stolen.
 
Guiness is not a good beer.

the Draught(i think) is good, the domestic Guinness sucks(I believe its the stout?)

or I could have it backwards, basically if it was brewed in the US it sucks
 
Correct, the stout is horrible while the draught is awesome.
The water from the Wicklow mountains has this little je ne sais quoi. It's best enjoyed in Dublin where Guinness quality teams inspect the pubs' taps and pipings to ensure the beer is perfect every time.
Even then it's still noticeably better in some pubs than in others.

My favorite is in John Kavanagh's pub (Grave Diggers) in Glasnevin (Dublin 9)
 
It's a front page news item = no editing.

This seems like a brain-dead move by Mozilla. Why have we been told for years to not use the same password everywhere?
 
Also, there is no such thing as completely secure. There's only "as secure as we can make it."

Mozilla utterly fail for making that statement also.
 
Ugh...why Mozilla? Why?

The last thing we need to do is "Encourage" stupid security behavior. The average persons security measures are terrible enough without giving them a means to be even lazier.

I can't wait for the flood of "I got hacked" due to their master key being 1234.:mad:
 
I can't catch the point why such a big company creates a free browser software with a complete secure system?

J.gif
f.gif
 
to all the haters here is a reality check. [H] does NOT represent the avg user by a LONG shot.

I think this is actually going to be a good thing for a lot of people. The plain fact is that most issues are user related, unsafe browsing habits, weak passwords, installing spy-ware, or falling for phishing scams. having one strong simple to use system is likely to be far better for the masses then what would be good for [H] users. I could actually see this concept being taken further and being put to use by security software.


Having said that I will not be using this. then again I use ABP and no script on any sight I don't trust implicitly. That is far out for the avg user and I don't even expect my family to do this. So this might well prove to be the lesser of two evils for the avg users. And please do not talk about teaching safe browsing habits. if that worked a lot of us would be out of work (pun not intended)
 
to all the haters here is a reality check. [H] does NOT represent the avg user by a LONG shot.

I think this is actually going to be a good thing for a lot of people. The plain fact is that most issues are user related, unsafe browsing habits, weak passwords, installing spy-ware, or falling for phishing scams. having one strong simple to use system is likely to be far better for the masses then what would be good for [H] users. I could actually see this concept being taken further and being put to use by security software.


Having said that I will not be using this. then again I use ABP and no script on any sight I don't trust implicitly. That is far out for the avg user and I don't even expect my family to do this. So this might well prove to be the lesser of two evils for the avg users. And please do not talk about teaching safe browsing habits. if that worked a lot of us would be out of work (pun not intended)

There is actually more to this story. It has been shown that most computer users, don't and can't remember the great multitude of passwords that they need to, never mind the fact that they use idiot passwords to begin with. Secure passwords when implemented, most often cause corporate headaches of the "ummm I forgot my password" kind at the user level, or complete utter failure across systems such as the Vodafone debacle that was exposed by THC. OpenID or this Browser ID project are good ideas, because as idealistic as we as [H]ard users can be about pw's etc, the great masses won't be. Now, there are obviously some big BIG cons to this, it's going to be a matter of how easy this will be implemented, how securely, etc...But we have to step outside of the [H]-bubble from time to time....
 
to all the haters here is a reality check. [H] does NOT represent the avg user by a LONG shot.

I think this is actually going to be a good thing for a lot of people. The plain fact is that most issues are user related, unsafe browsing habits, weak passwords, installing spy-ware, or falling for phishing scams. having one strong simple to use system is likely to be far better for the masses then what would be good for [H] users. I could actually see this concept being taken further and being put to use by security software.


Having said that I will not be using this. then again I use ABP and no script on any sight I don't trust implicitly. That is far out for the avg user and I don't even expect my family to do this. So this might well prove to be the lesser of two evils for the avg users. And please do not talk about teaching safe browsing habits. if that worked a lot of us would be out of work (pun not intended)

No, a Single master password to all your other passwords is never a good idea for any user on any level, Especially for the average user. My job is to deal with the average user every single day. The sheer level of stupidity when it comes to things like this is staggering. The last thing that group needs is something that encourages terrible security practices.
 
There are plenty of sites where I'd like to sign in to post, or some other minor action that I'd rather not go through their entire process of making yet another account on yet another website. I'd love to use something like this, for those types of sites, if it gets adopted widely.

I don't think it's meant for banking and such, and perhaps they themselves don't think it should be used for that. Their example was a site about favorite beers not something important.

People already use Facebook Connect for things like this don't they?
 
No, a Single master password to all your other passwords is never a good idea for any user on any level, Especially for the average user. My job is to deal with the average user every single day. The sheer level of stupidity when it comes to things like this is staggering. The last thing that group needs is something that encourages terrible security practices.

Firefox has been using a master password for its password database for awhile now.
 
Back
Top