Password Managers

[YeOldeStonecat]

And don't get me started on the banks... those idiots have been a half century behind everyone else on security standards for my entire lifetime..

Yeah..banks are pretty bad. I see sooooo many clients ask "Where is Internet Explorer...I need it for the bank, our bank requires IE" Or some healthcare portal for a healthcare client.

I'm like.."Uhm...IE was RETIRED back in Jan..it's no longer updated, it's insecure, etc etc etc". //rolls eyes at banks..and healthcare places...that require IE and don't work in Chrome or FF. You'd think banks or healthcare places would have just an smidge of concern about security.

 

[britechguy]

[QUOTE="YeOldeStonecat, post: 703056, member: 58736"rolls eyes at banks..and healthcare places...that require IE and don't work in Chrome or FF. You'd think banks or healthcare places would have just an smidge of concern about security.[/QUOTE]

I have not encountered said beasts in a number of years. I have encountered a lot of documentation that dates from the IE era that has never been updated, which for sites handling financial transactions or healthcare data in particular is almost as bad as actually requiring IE.

My first piece of advice when someone insists that a site "says it requires IE" is to try any modern browser of their choosing first. I haven't had anyone report back that they had to use IE in somewhere in the area of 10 years now.

The old [newish] adage, "Don't believe everything you read [on the internet]," applies to virtually anything that says, "Requires Internet Explorer," at this time. For those that are specific about version, and where it's earlier than 11, it's an even bigger red flag that the documentation hasn't been reviewed if far too long.

 

[Diggs]

IE in somewhere in the area of 10 years now.

IE was required by Quickbooks up until a few years ago.

 

[britechguy]

IE was required by Quickbooks up until a few years ago.

I have no doubt that there were certain businesses that were way behind the curve.

But, as much as has been said about banks in this topic, that has not been my experience with them. With their documentation, sometimes, but with modern browsers using modern security not working with their online banking sites, no.

 

[YeOldeStonecat]

I have not encountered said beasts in a number of years. I have encountered a lot of documentation that dates from the IE era that has never been updated, which for sites handling financial transactions or healthcare data in particular is almost as bad as actually requiring IE. .

I didn't believe my client so I remoted in...and yup....right there in her browser session. Was not some stale FAQ section randomly stumbled upon. On the page to upload checks. //shrug
I told her to switch banks.

 

[britechguy]

I told her to switch banks.

Excellent advice. I'd add that if she were to actually follow through with doing so that she should absolutely and unequivocally state why.

To force the use of IE these days is unconscionable. I send what follows the line to those who absolutely insist that they will not give up IE nor should they have to. They have been warned.

------------------------------------
Why You Should Dump Internet Explorer | Daniel Miessler (Dec 2019)

The perils of using Internet Explorer as your default browser ... (March 2019 – straight from the proverbial horse’s mouth)

Microsoft cybersecurity expert: Please, stop using Internet ... (Feb 2019)

Microsoft security chief: IE is not a browser, so stop using ... (Feb 2019)

Microsoft wants you to stop using Internet Explorer (Feb 2019)

12 reasons not to use Internet Explorer, ever | Computerworld (June 2011 – Even more valid now)

And if you web search on “Why you should not use Internet Explorer” the list of returned results is long, and virtually unanimous in the expert (and non-expert) opinion that you should not.

 

[Sky-Knight]

Just the tip of the iceberg too... places like this exist: https://www.docmagic.com/

This company specializes in critical automation of MORTGAGES... and the website? Yeah... it runs on Java Web Start via the Oracle Java Runtime v8 only. Web Start was deprecated with Java 9, and simply doesn't exist in OpenJRE at all. There are some attempts at getting the support you need...

But that's just one of many mortgage industry specific web services that runs on archaic crap tech. You don't want to know how many other critical financial systems work the same way. So what if you switch banks? If you borrow money from ANYONE, your data is going through IE somewhere I guarantee it.

 

[britechguy]

So what if you switch banks? If you borrow money from ANYONE, your data is going through IE somewhere I guarantee it.

Service providers, and not just banks, *HATE* losing customers. If enough people walk away, and identify why they're doing so, things eventually get fixed.

I believe your guarantee is correct. The fastest way (and it won't be fast, I know) to get that remedied is by refusing to do business with those you know to be part of the problem. When it comes to chains of transactions, I can't make decisions for what the folks anywhere beyond the link where I'm involved do. But if I know that a service provider uses one that is cavalier about security, that's enough to reconsider who I do business with, and I tell 'em why when I walk.

 

[Sudhir]

I use Google Calendar "Tasks" to store all my passwords in sort of encrypted manner, create a Google account login and select calendar and tasks, I don't trust any of these password managers

 

[Sky-Knight]

But you trust putting your passwords not only in a place where a single breach exposes them in clear text, but is also indexed by Google?

 

[britechguy]

I use Google Calendar "Tasks" to store all my passwords in sort of encrypted manner, create a Google account login and select calendar and tasks, I don't trust any of these password managers

Put more bluntly than @Sky-Knight did, "Your approach is bass-ackwards."

 

[Archon Prime]

I use Google Calendar "Tasks" to store all my passwords in sort of encrypted manner, create a Google account login and select calendar and tasks, I don't trust any of these password managers

Oh boy, and you're an IT professional, are ya?

 

[Greg Fultz]

I use Google Calendar "Tasks" to store all my passwords in sort of encrypted manner, create a Google account login and select calendar and tasks, I don't trust any of these password managers

i don't even know what to say to this