Yahoo creating 'on-demand' passwords

Look, the keys to the Internet Kingdom lie in the administrator accounts, not Grandma Jones' little email and photo cloud storage account. No hacker is going to bother with that.

The real problem is simple: lazy administrators. Keeping the admin account named 'admin' and using Mom's maiden name for a password make it ridiculously easy. And many, many admins do things just that silly.

Web sites that outline what a password requires are another potential problem. It shows that the site admin has no idea how hacking is done. When you tell the general public what everyone's passwords require, you're telling everyone what they contain. You're creating a blueprint which makes it easier, not harder, especially if the admin follows that blueprint.

Want better security? Tighten down the admin account. Nothing else is as important.