Ideas Whose Time Has Come (and Gone), v. 2017

NIST’s list for what’s out and what’s in this year

With each new discovery, an old theory often becomes obsolete
Credit: N. Hanacek/NIST

A catchphrase from a popular reality show goes: “One day you’re in. And the next day, you’re out.” For the purposes of the show, the host is referencing fashion. But the same could be said about science. With each new discovery or advance, an old theory or idea often becomes obsolete—or at least less important.

We here in the NIST public affairs office thought it might be fun to list some of the NIST-relevant scientific ideas that we think are on their way in and out in 2017. Although the items on the list below may not be as monumental as the discoveries that led to this year’s Nobel Prizes, MacArthur Foundation “genius” grants, or Breakthrough Prizes, we still think they’re pretty important and could contribute to a better future.

Your opinion may vary.

Out: Elements 113, 115, 117, and 118
In: nihonium (Nh), moscovium (Mc), tennessine (Ts), and oganesson (Og)

…

Want to continue?

By logging in you agree to receive communication from Quality Digest. Privacy Policy.

Create a FREE account

Forgot My Password

Comments

PW reuse, PW managers, Generate passphrases, Stanford policy

1,2 A bigger danger than PW cracking or keyloggers may be PW reuse. Thus if the user uses the same PW on 'Suzie's House of Kittens' and (some secured site), a DB breach at Suzie's could compromise the 'more secure' site. Allowing password managers like KeePass dramatically reduces this problem. The VA, eg, doesn't allow USBs or installing software on user machines, so this is a problem.

3 Security experts know users are generally not able to choose good passphrases. With offline crackers now using expanded PW dictionaries, PWs like "givemelibertyorgivemedeath" are no longer secure. Then there's Wordhound, which scours Twitter accounts, industry pubs, etc. for material relevant to just one breached company. Users need help choosing good passphrases.

4 An 8 char random string, even including (UPPER, lower, numbers, specials) is probably too short. Four truly random words is probably secure. As we know, longer is better.

**Suggested Change**:

1,2 Install OS password manager (eg KeePass) on all machines by default, and encourage its use. KP can addin Readable Passphrase Generator and others.

3 Install OS Passphrase Generator for use at the site a new password is needed, or better yet, auto generate a good memorable passphrase. "THE willing trowel PULLS a hinge" or "hinge trowel oxygen blue" are better than "MetsFan86"

4 Stanford's policy-"Which characters are required in my password? Answer: That depends on how long it is. The shorter it is, the more restrictions "

electronic security

Why do we always over complicate the simple?

What’s this, passwords are being hacked? You have t0 u5e 0utrageou$ CoMb1NaT10N$ t0 stay ahead? Add more characters, lift that shift key, tote that $ymbol!

HALT!!! Breathe….in, out..., in...., out... Ok we have lots of tools that can be employed here and many have additional benefits.

Biometrics it’s at your finger tips (har har). The fact you employee has the same password for their home email, media service, and cute kittens daily website is no longer a problem. Also people normally don’t forget a fingerprint over a long weekend.

Put the already required ID badge to use. You want to enter the building or use a computer? You need your ID badge. The password hint is even universal! “It’s around your neck”. You can even combine the badge AND your finger tip. If your badge is stolen or lost, we hope you maintained your fingers.

Stop taking the Rube Goldberg approach to computer security. *Porcupines would make for some interesting workplace safety policy* Besides the moment I see flaming hoops in front of my keyboard, I’m going to take a more serious look at self employment.