Hacking Weak Passwords

image thumb1 Hacking Weak Passwords There is a post on One Man’s Blog that I thought was pretty interesting.  It is about the use of weak passwords and how they can get you into trouble.

The following is a list of common passwords from the post:

  1. Your partner, child, or pet’s name, possibly followed by a 0 or 1 (because they’re always making you use a number, aren’t they?)
  2. The last 4 digits of your social security number.
  3. 123 or 1234 or 123456.
  4. “password”
  5. Your city, or college, football team name.
  6. Date of birth – yours, your partner’s or your child’s.
  7. “god”
  8. “letmein”
  9. “money”
  10. “love”

Assuming the hacker has a reasonably fast connection and PC here is an estimate of the amount of time it would take to generate every possible combination of passwords for a given number of characters.

Password Length All Characters Only Lowercase
3 characters
4 characters
5 characters
6 characters
7 characters
8 characters
9 characters
10 characters
11 characters
12 characters
13 characters
14 characters
0.86 seconds
1.36 minutes
2.15 hours
8.51 days
2.21 years
2.10 centuries
20 millennia
1,899 millennia
180,365 millennia
17,184,705 millennia
1,627,797,068 millennia
154,640,721,434 millennia
0.02 seconds
.046 seconds
11.9 seconds
5.15 minutes
2.23 hours
2.42 days
2.07 months
4.48 years
1.16 centuries
3.03 millennia
78.7 millennia
2,046 millennia
linkedin Hacking Weak Passwordsshare save 171 16 Hacking Weak Passwords

Private Messages Without The Headache

 privnote is a cools little web application that allows you to leave private SSL encrypted notes for one-time use by your chosen recipient.

Essentially, it is an SSL encrypted site that allows you to type a message into a textbox.  Then, it gives you a URL containing the random key to your message.  You, then, send that URL to the recipient of your secret message.  Finally, after the recipient views the message and leaves the page, the message is automatically destroyed.

A very simple idea with a very simple execution.

Definitely one of those things that you say: “why didn’t I think of that?”

windowslivewriterprivatemessageswithouttheheadache dd45image 3 Private Messages Without The Headache

via: ReadWriteWeb & MakeUseOf

linkedin Private Messages Without The Headacheshare save 171 16 Private Messages Without The Headache

Human Firewall

image22 Human Firewall

I had to take a mandatory corporate information technology security web class today.  The main idea is that we all need to be a “Human Firewall”.

Human Firewall – an end user who can recognize, respond to and prevent information security accidents

That’s really a great way to put it.  I was impressed that the organization that I work for is willing to require some basic IT education for all employees.

linkedin Human Firewallshare save 171 16 Human Firewall