Multi-factor Auth and password reuse

MailChimp just had an interesting blog post about the new authentication system from AlterEgo that they have started using.

But what I found most interesting about the article is the study they made of leaked passwords. Using a file that was hacked from a blog network and posted online, they discovered that 25000 accounts on their service matched the e-mail. Out of those, 7000 used the same password – a much larger amount than they expected. And certainly much more than I did.

While AlterEgo's system is much less secure than RSA token, it is free and adds some security.

By Luiz A D R Marques

I've been developing software and selling it on-line since 1994. Current products include STG FolderPrint Plus - a tool to Print Folders, and STGThumb - HTML Album Generator, among others. Some of my other sites - Disk Usage, Directory Printer ,Print Folders and Jejum Intermitente .