via HTG
Category Archives: Security
Hacking Weak Passwords
There is a post on One Man’s Blog that I thought was pretty interesting. It is about the use of weak passwords and how they can get you into trouble.
The following is a list of common passwords from the post:
- Your partner, child, or pet’s name, possibly followed by a 0 or 1 (because they’re always making you use a number, aren’t they?)
- The last 4 digits of your social security number.
- 123 or 1234 or 123456.
- “password”
- Your city, or college, football team name.
- Date of birth – yours, your partner’s or your child’s.
- “god”
- “letmein”
- “money”
- “love”
Assuming the hacker has a reasonably fast connection and PC here is an estimate of the amount of time it would take to generate every possible combination of passwords for a given number of characters.
Password Length All Characters Only Lowercase 3 characters
4 characters
5 characters
6 characters
7 characters
8 characters
9 characters
10 characters
11 characters
12 characters
13 characters
14 characters0.86 seconds
1.36 minutes
2.15 hours
8.51 days
2.21 years
2.10 centuries
20 millennia
1,899 millennia
180,365 millennia
17,184,705 millennia
1,627,797,068 millennia
154,640,721,434 millennia0.02 seconds
.046 seconds
11.9 seconds
5.15 minutes
2.23 hours
2.42 days
2.07 months
4.48 years
1.16 centuries
3.03 millennia
78.7 millennia
2,046 millennia
Windows & Viruses Born On The Same Day
According to Wired, Bill Gates revealed Windows and Fred Cohen revealed the first computer virus on the same day in 1983, November 10th.
Kind of ironic given the Windows track record on viruses.
htaccess For The Rest Of Us
For those of you that use Linux and Apache and would like to manage things on your site with htaccess files like: authentication, file access, custom error pages, rewrite rules, redirects, etc.
There is an online .htaccess editor available.
It makes things a lot easier.
RedHat Not Inpenetratable
Private Messages Without The Headache
privnote is a cools little web application that allows you to leave private SSL encrypted notes for one-time use by your chosen recipient.
Essentially, it is an SSL encrypted site that allows you to type a message into a textbox. Then, it gives you a URL containing the random key to your message. You, then, send that URL to the recipient of your secret message. Finally, after the recipient views the message and leaves the page, the message is automatically destroyed.
A very simple idea with a very simple execution.
Definitely one of those things that you say: “why didn’t I think of that?”
via: ReadWriteWeb & MakeUseOf
Human Firewall
I had to take a mandatory corporate information technology security web class today. The main idea is that we all need to be a “Human Firewall”.
Human Firewall – an end user who can recognize, respond to and prevent information security accidents
That’s really a great way to put it. I was impressed that the organization that I work for is willing to require some basic IT education for all employees.


