»In which we compromise security

The iPhone is buggering my passwords for web applications. I typically use -- and many sites prudently require! -- a password seed that is a mixture of letters and numbers, so as to throw off the brute-force, dictionary, and script k1dd3 attacks. However, the iPhone's split keyboard (one view for alpha, a second for numeric and symbols) means additional taps in order to enter passwords that have combinations of alpha and numeric characters. Worse, logging in to a site where my username or password contains these interleaved becomes slow and tortuous. It's re-learning typing, but less efficiently. I changed a few passwords for apps that I expect to use more from the 'phone than the 'puter, but in doing so felt a pit in my stomach that I was easing up too much on the security of the passwords in favour of the convenience of the keyboard. I wonder if a subsequent update will include an escrow service (like Keychain?), or an option for an extended keyboard.

salim filed this under osx at 08h56 Friday, 13 July 2007 (link) (Yr two bits?)