Sometimes you just have to laugh… but this isn’t one of them.

from JoeUser Forums

 

When you consider how much damage can be done to you life by preventable account breaches....

The list of the twenty five worst passwords for 2011 was just published. SplashData, a password management app maker, compiled a list of the 25 worst passwords of 2011, based on millions of stolen passwords that were dumped online (after significant security breaches)(http://mashable.com/2011/11/17/worst-internet-passwords/).

I know the folks here have better sense than to use the ones found by Splashdata:

1. password

2. 123456

3. 12345678

4. qwerty

5. abc123

6. monkey

7. 1234567

8. letmein

9. trustno1

10. dragon

11. baseball

12. 111111

13. iloveyou

14. master

15. sunshine

16. ashley

17. bailey

18. passw0rd

19. shadow

20. 123123

21. 654321

22. superman

23. qazwsx

24. michael

25. football

The statistics about passwords are rather daunting (Sean Carroll http://www.pcmag.com/article2/0,2817,2371072,00.asp):

  • 41 percent have shared passwords with at least one other person in the past year.
  • 90 percent don't ensure that they never use the same password on multiple accounts.
  • 86 percent don't check that they're on a secure connection when accessing sensitive information on unfamiliar computers.
  • 14 percent never change their banking password.
  • 20 percent have used a significant date (such as a birthday) or a pet's name in their passwords.
  • 84 percent fail to use passwords more than ten characters long.

And Webroot (ibid) found that among 18 to 29 year-olds:

  • 12 percent have shared a password in a text message (vs. 4 percent overall).
  • 30 percent logged into a site requiring a password over public Wi-Fi (vs. 21 percent overall).
  • 54 percent have shared passwords with one or more people in the past year (vs. 41 percent overall).

 

If however you’re still looking for a way to protect yourself with a good, strong password then try LastPass 1.80 (free) or one of the other five discussed by Neil J. Rubenking here:

http://www.pcmag.com/article2/0,2817,2381432,00.asp

The free and “pay for” ($1/month) version support Windows (all), Mac and Linux. The latter provides additional worthwhile features you can view here:

http://lastpass.com/features_premium.php

A good article by Eric Griffith on how to create strong passwords, (you should at least bookmark it for that spare weekend you promised to do something good for yourself) can be found here:

http://www.pcmag.com/article2/0,2817,2368484,00.asp

 

This won’t protect you from sites which store your data insecurely. However, you should do your part to protect yourselves, folks: Do what you can so you won’t be sorry.

49,311 views 24 replies
Reply #1 from WinCustomize Forums Top

I actually think it´s rather funny Doc :grin:

Reply #2 from WinCustomize Forums Top

When I was using WiFi, some of the passwords were their last name... or the name of they're business.  Go figure. Small, trusting town.   O:)

 

DeskScapes - Bring your desktop background to life.
Reply #3 from Stardock Forums Top

When it comes to passwords, the old saying "the best place to hide is in plain site" should be totally ignored.

The part about loging in to Public WiFi networks and putting in passwords and stuff, some people may want to consider checking out this video from Hak5 http://revision3.com/hak5/mark3engage about the pineapple device so they can see the devices out there designed to steal info from people using public WiFis. They made it look like a 5 year old could do it.

Reply #4 from Elemental Forums Top

 

 

Fuck these people. How dare they not embrace new technology as fast as I do?!

 

 

Oh man, you wouldn't BELIEVE the discussion I had yesterday with a potential client. They were interested in having some sort of intranet produced. I asked them what they were using today, and in terms of security what they had. One of the highest ranking lawyer firms where I live, told me flat to my face that 1) they didn't really have any security, and 2) they weren't that interested in it. They said "we haven't really had any problems with security", and I told them there was no way for them to know that, for all they knew their "enemies" could be reading it right now and they'd have no way of knowing.

They told me they'd be interested in spending maybe 20-25k dollars on a new intranet, and I told them I wasn't interested in doing business with them (way too much liability when they get hacked). Then I told them, for their kind of turnover and the required security of the information, they'd be looking at at least 500k+ one-time investment and a permanent employee to at least get a fairly good sense of security.

These people handle millions of dollars on a daily basis, and if I had stolen their laptop (or anyone on the street, for that matter), I would have had instant access to _all_ their files. And this is what really blows my mind. They don't even use passwords in the traditional sense - it's all "saved" passwords, ie you type it in once and then the browser or software saves it so you don't have to fill it in again.

If there ever is a skynet with robots taking over the world, I don't imagine there will be a lot of laughing. But I reckon the robots will get a good laugh out of seeing their security.

Reply #5 from WinCustomize Forums Top

They can't steal it if it isn't out there. Online storage ... nope. Bank accounts on line ... nope. So screw 'em.  :rofl: :rofl:

Reply #6 from WinCustomize Forums Top

Quoting Heavenfall, reply 4
They said "we haven't really had any problems with security"
End of Heavenfall's quote

I believe that. It's not understanding or underestimating the need for security.  

Quoting Heavenfall, reply 4
Fuck these people. How dare they not embrace new technology as fast as I do?!
End of Heavenfall's quote

These are hard working, salt of the earth, what makes our Country great, people. I find that harsh and unnecessarily foul. 

I know your kidding but, I had to speak up for these nice folks.

 

Reply #7 from Elemental Forums Top

Quoting IROKONESS, reply 6
I believe that. It's not understanding or underestimating the need for security.
End of IROKONESS's quote

Uhm, yes, that's exactly what it is. Even if they really haven't had any problems, that's a horrible attitude to have when you deal with extremely sensitive information stored digitally.

Reply #8 from Stardock Forums Top

Fact. Wonder how many more there are?

Reply #9 from WinCustomize Forums Top

A few of my favorites:

iforgot

secret

unknown

Reply #10 from WinCustomize Forums Top

Now stop it!  You folks have just listed all my choices for passwords.  :O :-" :rofl: :rofl: :rofl:

Reply #11 from Elemental Forums Top

Quoting IROKONESS, reply 6



These are hard working, salt of the earth, what makes our Country great, people. I find that harsh and unnecessarily foul. 

I know your kidding but, I had to speak up for these nice folks.

 
End of IROKONESS's quote

You know he was talking about lawyers right?

OT; amazing that there still are so many people using passwords like these. Although I have to admit one of them looks very familiar, I used a variation on it when I first started using sites that required logins.

90 percent don't ensure that they never use the same password on multiple accounts
End of quote

You mean using different passwords for different sites? Because I have a few sites that share passwords, mostly news sites and the like. Even if they were hacked, the biggest hassle would be having to make a new account and reporting the old one.

Reply #12 from WinCustomize Forums Top

Quoting Satrhan, reply 11
You mean using different passwords for different sites?
End of Satrhan's quote

Yes. Using the same password on a number of sites.

Reply #13 from WinCustomize Forums Top

My password is ******

+1 Loading…
Reply #14 from WinCustomize Forums Top

I found that the best password is a whole sentence. Five words or more. Let them try and crack that one. HA!

Reply #15 from WinCustomize Forums Top

Quoting Fuzzy, reply 13
My password is ******
End of Fuzzy's quote

:rofl:  

 I've used that password before.

Reply #16 from WinCustomize Forums Top

Quoting Wizard1956, reply 15
Quoting Fuzzy Logic, reply 13My password is ******

 

I've used that password before.
End of Wizard1956's quote

That's because you're a.... star. X| :grin:

 

Definition of a strong password:

A password that is hard to detect both by humans and by the computer. Two
things make a password stronger: (1) a larger number of characters, and (2)
mixing numeric digits, upper and lower case letters and special characters ($, #, %, etc.).

To make it stronger, the site should salt and hash it, as well as any info stored on it.

Reply #17 from WinCustomize Forums Top

:thumbsup:

Reply #18 from JoeUser Forums Top

I am paranoid about passwords, but unfortunately so many are not.  When on public Wifi, I always use VPN and then work that way.  I was a bit surprised by the list (I read the article before yours Doc) as while most are kind of DUH, a couple are not.  Ashley????

Reply #19 from WinCustomize Forums Top

And then the inevitable teenager password-joke:

"I was requested to change my password, so I used 'penis'  XD }:)

but it was too short 8| '

Reply #20 from WinCustomize Forums Top

84 percent fail to use passwords more than ten characters long.
End of quote

 

Quoting DrJBHL, reply 16
special characters ($, #, %, etc.).
End of DrJBHL's quote

 

some site don't even let you use that meany or the Special Characters and/or Numbers

 

but then again their not sensitive sites ie news, forum

 

 

 

Reply #21 from WinCustomize Forums Top

Quoting Satrhan, reply 11
You know he was talking about lawyers right?
End of Satrhan's quote

Was not. >_>   Where does it say lawyers and not normal folks with simple passwords?  

 

Reply #22 from Elemental Forums Top

Heavenfall was, right here:

Quoting Heavenfall, reply 4

One of the highest ranking lawyer firms where I live
End of Heavenfall's quote

Reply #23 from Stardock Forums Top

Quoting Satrhan, reply 22
One of the highest ranking lawyer firms where I live
End of Satrhan's quote

 He was speaking in general terms at the beginning. And only afterwards, did he decide to share the story. 

Probably cuz  of the way it looked. Rude.

Reply #24 from Sins Forums Top

Me, I use different passwords for my sins accounts and my non-sins accounts.  I don't use WiFi, so I'm safe there, and have never let anyone have my password, so I'm also safe there.  I was thinking about making a password document and ciphering my passwords...

Personally, just like I believe telemarketing should be illegal, I think you should be able to sue anyone who hacks your online info for at least lots of money.

'Course, I also believe that the public should be able to get programs that can detect proxy servers and that stuff that fry the hackers' computer.  I mean wipe it, make it unusable.