Passwords Evolved: Authentication Guidance for the Modern Era
This is a great article, but it doesn&#x27;t acknowledge that there is sometimes a tradeoff between security and profit.<p>For example, imagine a typical user who tries to choose a password:<p>User: I want my password to be &quot;monkey&quot;<p>System: Sorry, that password is in the dictionary<p>User: OK, I want my password to be &quot;monkey1&quot;<p>System: Sorry, that password is on a list of exposed passwords<p>User: Grrr!  OK, I want my password to be &quot;monkeymonkey&quot;<p>System: Sorry, that password is on a list of exposed passwords<p>User: Grrr!  OK, I want my password to be &quot;monkeyfuckyou!!!&quot;<p>System: Sorry, that password is on a list of exposed passwords<p>User: Screw this, I&#x27;ll just sign up with one of your competitors.