<?xml version="1.0" encoding="utf-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Sarah Palin&#8217;s email exposed</title>
	<atom:link href="http://www.tdrake.net/sarah-palins-email-exposed/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.tdrake.net/sarah-palins-email-exposed/</link>
	<description></description>
	<lastBuildDate>Fri, 11 Dec 2009 20:45:40 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
	<item>
		<title>By: Jemaleddin</title>
		<link>http://www.tdrake.net/sarah-palins-email-exposed/comment-page-1/#comment-30860</link>
		<dc:creator>Jemaleddin</dc:creator>
		<pubDate>Mon, 22 Sep 2008 21:06:35 +0000</pubDate>
		<guid isPermaLink="false">http://www.tdrake.net/?p=285#comment-30860</guid>
		<description>Over here:

http://bit.ly/42hHAj

Ed Felten points out:

&quot;Yahoo could also have followed Gmail&#039;s lead, and disabled the security-question mechanism unless no logged-in user had accessed the account for five days. This clever trick prevents password &#039;recovery&#039; when there is evidence that somebody who knows the password is actively using the account.&quot;

But I wonder about that. What if one computer has my email password saved (and I don&#039;t know how to tell it to give me that info) but another doesn&#039;t? I&#039;ve had people tell me they could only get their email at work. That would totally hose them. Still, Ed has a number of other recommendations that make sense.</description>
		<content:encoded><![CDATA[<p>Over here:</p>
<p><a href="http://bit.ly/42hHAj" rel="nofollow">http://bit.ly/42hHAj</a></p>
<p>Ed Felten points out:</p>
<p>&#8220;Yahoo could also have followed Gmail&#8217;s lead, and disabled the security-question mechanism unless no logged-in user had accessed the account for five days. This clever trick prevents password &#8216;recovery&#8217; when there is evidence that somebody who knows the password is actively using the account.&#8221;</p>
<p>But I wonder about that. What if one computer has my email password saved (and I don&#8217;t know how to tell it to give me that info) but another doesn&#8217;t? I&#8217;ve had people tell me they could only get their email at work. That would totally hose them. Still, Ed has a number of other recommendations that make sense.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ted Drake</title>
		<link>http://www.tdrake.net/sarah-palins-email-exposed/comment-page-1/#comment-30858</link>
		<dc:creator>Ted Drake</dc:creator>
		<pubDate>Sun, 21 Sep 2008 06:50:26 +0000</pubDate>
		<guid isPermaLink="false">http://www.tdrake.net/?p=285#comment-30858</guid>
		<description>It&#039;s interesting how that worked out. The average person&#039;s life wouldn&#039;t be splashed all over the internet. But if you are a celebrity, you need to keep even your secret questions coded.</description>
		<content:encoded><![CDATA[<p>It&#8217;s interesting how that worked out. The average person&#8217;s life wouldn&#8217;t be splashed all over the internet. But if you are a celebrity, you need to keep even your secret questions coded.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jemaleddin</title>
		<link>http://www.tdrake.net/sarah-palins-email-exposed/comment-page-1/#comment-30857</link>
		<dc:creator>Jemaleddin</dc:creator>
		<pubDate>Sun, 21 Sep 2008 01:55:44 +0000</pubDate>
		<guid isPermaLink="false">http://www.tdrake.net/?p=285#comment-30857</guid>
		<description>A good password wouldn&#039;t have helped her. According to Wired:

“As detailed in the postings, the Palin hack didn’t require any real skill. Instead, the hacker simply reset Palin’s password using her birthdate, ZIP code and information about where she met her spouse — the security question on her Yahoo account, which was answered (Wasilla High) by a simple Google search.”

http://blog.wired.com/27bstroke6/2008/09/palin-e-mail-ha.html</description>
		<content:encoded><![CDATA[<p>A good password wouldn&#8217;t have helped her. According to Wired:</p>
<p>“As detailed in the postings, the Palin hack didn’t require any real skill. Instead, the hacker simply reset Palin’s password using her birthdate, ZIP code and information about where she met her spouse — the security question on her Yahoo account, which was answered (Wasilla High) by a simple Google search.”</p>
<p><a href="http://blog.wired.com/27bstroke6/2008/09/palin-e-mail-ha.html" rel="nofollow">http://blog.wired.com/27bstroke6/2008/09/palin-e-mail-ha.html</a></p>
]]></content:encoded>
	</item>
</channel>
</rss>
