Back to School, re Yale SSN fiasco
Back to School:
“Now let’s move on to the other criminally dumb figure in this fiasco. That Yale Web site was designed by a self-promoting Yale sophomore who brags that he has worked for Microsoft since he was 14. He’s the genius who decided that birth dates and Social Security numbers would make the perfect passwords because of their “personally identifiable nature,” according to the Yale Daily News, the student newspaper that broke the story late last month before it was picked up by The Washington Post and the wire services…. Outside audits of security still matter, too. Yale actually has an Information Security Office that investigates cases such as identity theft – but apparently no one talked to the office until after the site had been up for six months and had already been hacked. “
