Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

'Trivial' Passwords Enabled Huge Hack
pcworld.com ^ | Jan 23, 2010 | John E. Dunn

Posted on 01/23/2010 7:59:06 AM PST by TaxPayer2000

click here to read article


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-71 next last
To: TexasFreeper2009
Whilst trying to fix a glitch in my mac's email, I stumbled across something I hadn't noticed before. I was called "Special Characters." I wonder if they might be used in passwords???---ோ---
21 posted on 01/23/2010 8:40:05 AM PST by Dr. Bogus Pachysandra ( Ya can't pick up a turd by the clean end!)
[ Post Reply | Private Reply | To 15 | View Replies]

To: Dr. Bogus Pachysandra
It not I. I see they character came through here.⌘Ӭ❒✇
22 posted on 01/23/2010 8:47:20 AM PST by Dr. Bogus Pachysandra ( Ya can't pick up a turd by the clean end!)
[ Post Reply | Private Reply | To 21 | View Replies]

To: Dr. Bogus Pachysandra

Wish I could edit my posts! Sigh,,,,,,,,,


23 posted on 01/23/2010 8:48:25 AM PST by Dr. Bogus Pachysandra ( Ya can't pick up a turd by the clean end!)
[ Post Reply | Private Reply | To 22 | View Replies]

To: ladyvet

plaStics


24 posted on 01/23/2010 8:53:14 AM PST by cbkaty (I may not always post...but I am always here......)
[ Post Reply | Private Reply | To 18 | View Replies]

To: TaxPayer2000

I have three tiers of password. One for throw away accounts that I don’t care if they get hacked, one for more secure things that I might tell a friend if necessary and one for any accounts that involve credit cards or money. Nobody gets that one and it isn’t written down anywhere.

Even the least secure has upper and lower case, 9 digits and isn’t a single dictionary word.

It’s pretty easy to make an easily rememberable secure password. I help students make them every fall. Here’s what I recommend.

1. Pick two words you can remember, for example: bad dog
2. Put them together and replace the vowels with special characters: b@dd0g (that’s a zero replacing the “o”)
3. Put a special character at the beginning: !b@dd0g
4. Put a number you can remember at the end: ^b@dd0g6
5. Capitalize the first letter of the second word: ^b@dD0g6

There you go. A very secure password you remember just by thinking bad dog and remembering the number 6. The ^ character is above the 6.

I like this method because you can change your passwords as often as you want by simply picking a different number and changing the special character and number to a different key.


25 posted on 01/23/2010 8:56:00 AM PST by Poser (Enjoying Prime Rib for 58 Years!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: TaxPayer2000

The majority are undoubtedly government employees.


26 posted on 01/23/2010 8:56:01 AM PST by Oldpuppymax (AGENDA OF THE LEFT EXPOSED)
[ Post Reply | Private Reply | To 1 | View Replies]

To: cbkaty

plastics

27 posted on 01/23/2010 8:56:35 AM PST by cbkaty (I may not always post...but I am always here......)
[ Post Reply | Private Reply | To 24 | View Replies]

To: TaxPayer2000

If you have ever ridden a Harley Davidson motorcycle, you have an instant password, the model designation.

Flhtcui2009

That would be a 2009 Electra-Glide ultra classic.


28 posted on 01/23/2010 8:59:50 AM PST by Poser (Enjoying Prime Rib for 58 Years!)
[ Post Reply | Private Reply | To 1 | View Replies]

To: cbkaty

m00se


29 posted on 01/23/2010 9:03:13 AM PST by Erasmus (<under construction>)
[ Post Reply | Private Reply | To 24 | View Replies]

To: TaxPayer2000

Once, about 15 years ago, we had a Unix network where I was working. One Friday afternoon, we decided to run one of those password auditing programs on a Sun workstation. It cracked about 25% of the passwords almost instantly. Those were the ones on the short list of common passwords and the ones formed by simple permutations of known user details. Over the weekend, it managed to get about another 50% by brute-force guessing. For instance, we had one developer of German background who thought he was a fox. It guessed his password (fuchs) sometime Saturday.


30 posted on 01/23/2010 9:03:31 AM PST by cynwoody
[ Post Reply | Private Reply | To 1 | View Replies]

To: Dr. Bogus Pachysandra
Awww Bogus, as far as we are concerned, you are a special character...
31 posted on 01/23/2010 9:03:54 AM PST by null and void (We are now in day 367 of our national holiday from reality. - 0bama really isn't one of US.)
[ Post Reply | Private Reply | To 22 | View Replies]

To: CIB-173RDABN; Bloody Sam Roberts; tomh68; Second Amendment First; shorty_harris

That is corporate America passing the buck. 30 Applications needing passwords with different character/length requirements. And with a person not supposed to use a small notebook (might get lost) or use a Password Master or use any USB or similar device (cyber secure computer) then we have a problem. Hypothetically speaking (of course).


32 posted on 01/23/2010 9:07:08 AM PST by BipolarBob (My bodyguard is a 6'3" pooka named Harvey.)
[ Post Reply | Private Reply | To 6 | View Replies]

To: null and void

Thanks nav! But I’m more “spatial” than “special!”


33 posted on 01/23/2010 9:08:20 AM PST by Dr. Bogus Pachysandra ( Ya can't pick up a turd by the clean end!)
[ Post Reply | Private Reply | To 31 | View Replies]

To: Erasmus

cH33zE!


34 posted on 01/23/2010 9:09:24 AM PST by null and void (We are now in day 367 of our national holiday from reality. - 0bama really isn't one of US.)
[ Post Reply | Private Reply | To 29 | View Replies]

To: Poser

Poser, and others:

Please discuss the merit or liability of picking one really strong password, and using it for all accounts.

On one hand, if someone figures it out, they can get into all your accounts. But to do so, they would need all usernames, and know what accounts to try them on. Seems pretty safe but let’s discuss.


35 posted on 01/23/2010 9:15:06 AM PST by loungitude (The truth hurts.)
[ Post Reply | Private Reply | To 25 | View Replies]

To: Poser
It’s pretty easy to make an easily rememberable secure password.

Or you can use Tom Van Vleck's pronounceable password generator. He advises, The best way to use this generator is to take its output it in ways known only to you. Make some letters capital, or insert punctuation and numbers. For extra security, pick two that you can remember and combine them.

36 posted on 01/23/2010 9:17:46 AM PST by cynwoody
[ Post Reply | Private Reply | To 25 | View Replies]

To: cynwoody; All
I've tried many solutions & strategies over the years and the best I've found is Diceware. If you've never heard of it or tried it, (you're probably already interested or you wouldn't be reading this thread) do yourself a favor and investigate.

In practice I've found very secure passwords remarkably easy to remember using this method. You can further increase the entropy by always adding another wrinkle, like capitalizing the nth word or substituting a number for a particular letter; something that only you know and is never written down.

Hope this helps.
37 posted on 01/23/2010 9:41:26 AM PST by rpierce (We have taglines now? :)
[ Post Reply | Private Reply | To 36 | View Replies]

To: CIB-173RDABN

Looks like there is a answer to multiple passwords. I will have to look into them and select the one best for me, thanks to all that responded to my post.


38 posted on 01/23/2010 9:43:00 AM PST by CIB-173RDABN
[ Post Reply | Private Reply | To 6 | View Replies]

To: TaxPayer2000

Let me use fairly simple passwords, but limit my guesses to 100 or 500 or 1000. No human would guess that many times.


39 posted on 01/23/2010 9:43:08 AM PST by conejo99
[ Post Reply | Private Reply | To 1 | View Replies]

To: CIB-173RDABN

I just checked, I have about 90 sites that need both usernames and passwords. That’s a total of 180 combinations, most of which are different.

I used to keep a notebook, but it was time consuming.

I now use RoboForm and it’s a lifesaver. upon installation it collects and stores all your passwords and usernames and stores them.

When you go to a site that requires your username, it automatically pops up and all you do is hit the ‘Fill and enter” button and you’re in. If a password is required it does that same.

You can have long, complecated passewords or whatever you want. It’s kind of like speeddial, after its entered, you can forget because it will remember for you.

I paid $30 online, a one time cost, updates are free.

I’m only a user, I don’t work for them, not an investor, but it’s a lifesaver.

You can also easily print out the entire list.


40 posted on 01/23/2010 10:03:58 AM PST by Balding_Eagle (If America falls, islam will cover the earth with darkness for a thousand years.)
[ Post Reply | Private Reply | To 6 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-71 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson