The Role of Worst Practices in Insecurity

“These days, security advisors talk a lot about Best Practices:
establishes procedures that are generally held to yield good
results. Deploy Best Practices in your organization, the advisors
say, and your security will improve. That’s true, as far as it
goes, but often we can make more progress by working to eliminate
Worst Practices.

“A Worst Practice is something that most of us do, even though
we know it’s a bad idea. One current Worst Practice is the way we
use passwords to authenticate ourselves to web sites.”

Complete Story