Submission + - Passwords not going away. Not soon, not ever. (wired.com)
isoloisti writes: Hot on the heels of IBM's "no more passwords" prediction Wired has an article about provocative research saying that passwords are here to stay.
Researchers from Microsoft and Carleton U. take a harsh view of research on authentication saying “no progress has been made in the last twenty years.”
They dismiss biometrics, PKI, OpenID, and single-signon: “Not only have proposed alternatives failed, but we have learnt little from the failures.”
The problem is that the computer industry so thoroughly wrote off passwords about a decade ago, that not enough serious research has gone into improving them and understanding how they get compromised in the real world.
“It is time to admit that passwords will be with us for some time, and moreover, that in many instances they are the best-fit among currently known solutions.”
The MS/Carleton paper: http://research.microsoft.com/pubs/154077/Persistence-authorcopy.pdf
Researchers from Microsoft and Carleton U. take a harsh view of research on authentication saying “no progress has been made in the last twenty years.”
They dismiss biometrics, PKI, OpenID, and single-signon: “Not only have proposed alternatives failed, but we have learnt little from the failures.”
The problem is that the computer industry so thoroughly wrote off passwords about a decade ago, that not enough serious research has gone into improving them and understanding how they get compromised in the real world.
“It is time to admit that passwords will be with us for some time, and moreover, that in many instances they are the best-fit among currently known solutions.”
The MS/Carleton paper: http://research.microsoft.com/pubs/154077/Persistence-authorcopy.pdf