Ramblings of an old Doc

 

When you consider how much damage can be done to you life by preventable account breaches....

The list of the twenty five worst passwords for 2011 was just published. SplashData, a password management app maker, compiled a list of the 25 worst passwords of 2011, based on millions of stolen passwords that were dumped online (after significant security breaches)(http://mashable.com/2011/11/17/worst-internet-passwords/).

I know the folks here have better sense than to use the ones found by Splashdata:

1. password

2. 123456

3. 12345678

4. qwerty

5. abc123

6. monkey

7. 1234567

8. letmein

9. trustno1

10. dragon

11. baseball

12. 111111

13. iloveyou

14. master

15. sunshine

16. ashley

17. bailey

18. passw0rd

19. shadow

20. 123123

21. 654321

22. superman

23. qazwsx

24. michael

25. football

The statistics about passwords are rather daunting (Sean Carroll http://www.pcmag.com/article2/0,2817,2371072,00.asp):

  • 41 percent have shared passwords with at least one other person in the past year.
  • 90 percent don't ensure that they never use the same password on multiple accounts.
  • 86 percent don't check that they're on a secure connection when accessing sensitive information on unfamiliar computers.
  • 14 percent never change their banking password.
  • 20 percent have used a significant date (such as a birthday) or a pet's name in their passwords.
  • 84 percent fail to use passwords more than ten characters long.

And Webroot (ibid) found that among 18 to 29 year-olds:

  • 12 percent have shared a password in a text message (vs. 4 percent overall).
  • 30 percent logged into a site requiring a password over public Wi-Fi (vs. 21 percent overall).
  • 54 percent have shared passwords with one or more people in the past year (vs. 41 percent overall).

 

If however you’re still looking for a way to protect yourself with a good, strong password then try LastPass 1.80 (free) or one of the other five discussed by Neil J. Rubenking here:

http://www.pcmag.com/article2/0,2817,2381432,00.asp

The free and “pay for” ($1/month) version support Windows (all), Mac and Linux. The latter provides additional worthwhile features you can view here:

http://lastpass.com/features_premium.php

A good article by Eric Griffith on how to create strong passwords, (you should at least bookmark it for that spare weekend you promised to do something good for yourself) can be found here:

http://www.pcmag.com/article2/0,2817,2368484,00.asp

 

This won’t protect you from sites which store your data insecurely. However, you should do your part to protect yourselves, folks: Do what you can so you won’t be sorry.


Comments (Page 1)
2 Pages1 2 
on Nov 21, 2011

I actually think it´s rather funny Doc

on Nov 21, 2011

When I was using WiFi, some of the passwords were their last name... or the name of they're business.  Go figure. Small, trusting town.  

 

on Nov 21, 2011

When it comes to passwords, the old saying "the best place to hide is in plain site" should be totally ignored.

The part about loging in to Public WiFi networks and putting in passwords and stuff, some people may want to consider checking out this video from Hak5 http://revision3.com/hak5/mark3engage about the pineapple device so they can see the devices out there designed to steal info from people using public WiFis. They made it look like a 5 year old could do it.

on Nov 21, 2011

 

 

Fuck these people. How dare they not embrace new technology as fast as I do?!

 

 

Oh man, you wouldn't BELIEVE the discussion I had yesterday with a potential client. They were interested in having some sort of intranet produced. I asked them what they were using today, and in terms of security what they had. One of the highest ranking lawyer firms where I live, told me flat to my face that 1) they didn't really have any security, and 2) they weren't that interested in it. They said "we haven't really had any problems with security", and I told them there was no way for them to know that, for all they knew their "enemies" could be reading it right now and they'd have no way of knowing.

They told me they'd be interested in spending maybe 20-25k dollars on a new intranet, and I told them I wasn't interested in doing business with them (way too much liability when they get hacked). Then I told them, for their kind of turnover and the required security of the information, they'd be looking at at least 500k+ one-time investment and a permanent employee to at least get a fairly good sense of security.

These people handle millions of dollars on a daily basis, and if I had stolen their laptop (or anyone on the street, for that matter), I would have had instant access to _all_ their files. And this is what really blows my mind. They don't even use passwords in the traditional sense - it's all "saved" passwords, ie you type it in once and then the browser or software saves it so you don't have to fill it in again.

If there ever is a skynet with robots taking over the world, I don't imagine there will be a lot of laughing. But I reckon the robots will get a good laugh out of seeing their security.

on Nov 21, 2011

They can't steal it if it isn't out there. Online storage ... nope. Bank accounts on line ... nope. So screw 'em. 

on Nov 21, 2011

Heavenfall
They said "we haven't really had any problems with security"

I believe that. It's not understanding or underestimating the need for security.  

Heavenfall
Fuck these people. How dare they not embrace new technology as fast as I do?!

These are hard working, salt of the earth, what makes our Country great, people. I find that harsh and unnecessarily foul. 

I know your kidding but, I had to speak up for these nice folks.

 

on Nov 21, 2011

IROKONESS
I believe that. It's not understanding or underestimating the need for security.

Uhm, yes, that's exactly what it is. Even if they really haven't had any problems, that's a horrible attitude to have when you deal with extremely sensitive information stored digitally.

on Nov 21, 2011

Fact. Wonder how many more there are?

on Nov 21, 2011

A few of my favorites:

iforgot

secret

unknown

on Nov 21, 2011

Now stop it!  You folks have just listed all my choices for passwords. 

on Nov 21, 2011

IROKONESS



These are hard working, salt of the earth, what makes our Country great, people. I find that harsh and unnecessarily foul. 

I know your kidding but, I had to speak up for these nice folks.

 

You know he was talking about lawyers right?

OT; amazing that there still are so many people using passwords like these. Although I have to admit one of them looks very familiar, I used a variation on it when I first started using sites that required logins.

90 percent don't ensure that they never use the same password on multiple accounts

You mean using different passwords for different sites? Because I have a few sites that share passwords, mostly news sites and the like. Even if they were hacked, the biggest hassle would be having to make a new account and reporting the old one.

on Nov 21, 2011

Satrhan
You mean using different passwords for different sites?

Yes. Using the same password on a number of sites.

on Nov 21, 2011

My password is ******

on Nov 21, 2011

I found that the best password is a whole sentence. Five words or more. Let them try and crack that one. HA!

on Nov 21, 2011

Fuzzy Logic
My password is ******

 

 I've used that password before.

2 Pages1 2