exocet_cm
I am the law
Premium
join:2003-03-23
New Orleans, LA
clubs:  
 ·Cox HSI
·Suddenlink
 ·Cingular Wireless
 ·AT&T Southeast
·Charter Pipeline
| reply to Doctor Four
Re: Stupid User Tricks: Password Selection - "WORD1"
said by Doctor Four  :The MySpace crowd aren't really all that security savvy to begin with. I concur 
--
"I have measured out my life with coffee spoons..." - T.S Eliot
Ma Blog »www.johndball.com
|
|
Mr Anon
@il.us
| reply to NetWatchMan
Myspace has a password policy, it only specifies that you must use unmbers and letters for a password, therefore if you have an all alphabetic passwrod you'll have to add at least one number.
This is just a case of people having bad passwords but being forced to include something else on it. I'm not down playing its badness, just putting in my info. |
|
AB
Premium
join:2006-04-04
Leesburg, VA
| reply to Mele20
said by Mele20 :The problem with long passwords, and especially all those numbers, is that you can't see what you are typing. Way too easy to transpose numbers. I'd probably type that a dozen times and never get it right and some sites only allow three attempts. I only use complex passwords for banking sites and didn't do it for them until recently. There is no reason to x out passwords on the screen if the user isn't somewhere that others look over his shoulder or take photos from a distance. I always have wondered why that is done. That should be something that a user turns on if they need it otherwise what you are typing should show up on the screen. I'm always mistyping a password, even one that is not complicated and that I have typed many times, and it irritates me that I can't tell what I am typing. Sounds like a PEBKAC issue. |
|
Lanik
Lab-nik
Premium,ExMod 2002-03
join:2001-06-25
Bay Area
| reply to NetWatchMan
A place I used to work at had Passw0rd as their admin password on all the Windows machines that was always fun and to make things more secure it also matched everyones' initial password when they joined the company. I often wondered who thought that one up. 
--
"If it ain't broke don't fix it." |
|
Mele20
Premium
join:2001-06-05
Hilo, HI | reply to AB
What's "PBEKAC"? |
|
AB
Premium
join:2006-04-04
Leesburg, VA
| said by Mele20 :What's "PBEKAC"? Is that what I said? I thought I said "PEBKAC".
Google is your friend (well, my friend anyway.)
»en.wikipedia.org/wiki/PEBKAC |
|
Mele20
Premium
join:2001-06-05
Hilo, HI
| I transposed the letters as quite a few folks do all the time..I don't do it often thank goodness. I do it with numbers a great deal though.
If you are into playing games instead of answering my question...obviously it is irrelevant what it is. If I had wanted to use Scroogle to figure it out, I would have done so instead of politely asking you what you meant when the correct thing would have been for you to state what you meant in the first place. I asked for a fix for the stupid xxxx that one sees when typing a password. You gave me an acronym instead of a fix. Telling folks here who ask for help to use Google ...gee, why do we have these forums then? Everyone should just use a search engine if they need help. 
--
"The same ferocity that our founders devoted to protect the freedom and independence of the press is now appropriate for our defense of the freedom of the internet. The stakes are the same: the survival of our Republic". Al Gore, The Assault on Reason |
|
Grail Knight
Who Dares Wins
Premium
join:2003-05-31
·Verizon Online DSL
1 edit | reply to Mele20
Re: Stupid User Tricks: Password Selection - "WORD1"
Searching for an answer before asking a question is the norm as many times the question has already been asked and answered.
PEBKAC: »/nsearch?q=PEBKAC&cat=
Here is one tool that will reveal passwords which I found through a search engine. There are many others if you look for them. This one is freeware and no I have not used it as the asterisks are a security measure no matter where you are inputting the password. Just because a person is inside their home does not mean that someone is not peaking over your shoulder.
AsterWin
--
Edit* Corrected last sentence. |
|
Portmonkey
scurvy
Premium
join:2004-04-09
Southern IL
| reply to NetWatchMan
For those who don't like to memorize long passwords, the use of a device like a fingerprint scanner could be beneficial. Create long complex passwords for each site that requires a login and enter them into the scanner. Now each site the user visits has its own strong password, and there's no longer a need to have them all memorized or written down on a piece of paper for viewing each time the user needs to login. You'd want to change the passwords every so often and have them written down and tucked away in a safe place where they won't be lost. Some if not all fingerprint scanners allow you to make a backup password in case the device fails, but this reduces the level of security. I would guess that fingerprint scanners introduce their own set of security risks, but for the average user who is dead set in creating simple passwords such as Rover1, then a fingerprint scanner is likely a step up in security.
I hope that with future improvements in such technology and price drops, we'll see an increase in these devices and practicality for the lazy password creators.
--
Eating a steady diet of government cheese and livin in a van down by the river. |
|
youveshutmedown
@sbcglobal.net
| reply to NetWatchMan
said by NetWatchMan :said by C DM :So is it considered OK to run phishing sites and/or use botnets (even if they are for "research" purposes)? *I* was not running a phishing site...the malware, the botnet, and the miscreant were...I only allowed it to be active for a short period of time....the only reason I let it run for 12 hours was I thought it wasn't doing anything. My goals are not "research" oriented...unfortunately, I can't elaborate on that point. I agree that these tactics push the envelope but believe they are essential to countering cybercrime. Let me guess...related to this story?
»blog.washingtonpost.com/securityfix/
Nicely done. This appears to be ramping up to be an interesting summer, and year. |
|
Thug21
Just Chillin'
Premium
join:2005-08-21
3 edits | reply to alanhdsl
For medium security, I come up with a long phrase that is easy to remember and then use the first letter of each word. It might not be totally random but it's better than a lot of things. |
|
pog
Premium
join:2004-06-03
Kihei, HI
·Hawaiian Telcom
1 edit | I often just use old street names and dead phone numbers from my relatives' pasts.
For eg, sesame18085551212 ...long, no trouble remembering, very easy to type into a masked field. I can also write these down in part (ie, just the person's name) without risking much if someone "bad" finds the list...
My bank password is similarly structured using my grandmother's info from 1972.
--
My Site |
|
