• password conundrums

    Author
    Topic
    #492989

    password conundrums indeed
    I just made the wrong call on the latest snowstorm (Janus?) and banged in from work( Too old for that kinda stuff).
    So I was just reading a story @http://www.propublica.org/article/privacy-tools-how-to-build-better-passwords?utm_source=et&utm_medium=email&utm_campaign=dailynewsletter that has me a bit confused.
    The author recommends a system for choosing passwords called Diceware (http://world.std.com/~reinhold/diceware.html) that seems rather well dicey. It recommends rolling five dice 4 or 5 times, notating the results and picking words from a list w/ 7700 words matching the results. “correcthorsebatterystaple” would be a recommended password and stronger than one generated by the usual password utilities (which I do not use). A site linked to:
    https://dl.dropboxusercontent.com/u/209/zxcvbn/test/index.html says it would take 65 years to crack.

    This same site says “four financial institutions” would take 91 years. This password I got from an article from linked to in a thread(http://windowssecrets.com/forums/showthread//158452-Dumb-passwords-yet-again) started by Ruirib. I am finding this hard to believe especially on recent news on the feasibility of new techniques of dictionary attacks(sorry no link) ahh found it http://arstechnica.com/security/2013/10/how-the-bible-and-youtube-are-fueling-the-next-frontier-of-password-cracking/3/

    Maybe I lack imagination but I find it really hard to believe that correcthorsebatterystaple is any kind of secure password. What am I missing here??

    🍻

    Just because you don't know where you are going doesn't mean any road will get you there.
    Viewing 4 reply threads
    Author
    Replies
    • #1435088

      Wavy,

      I guess it depends on who you believe!

      Microsoft:
      36071-pwc-microsoft

      Gibson Research:
      36072-pwc-grc

      Intel:
      36073-pwc-intel

      Of course YMMV! HTH :cheers:

      May the Forces of good computing be with you!

      RG

      PowerShell & VBA Rule!
      Computer Specs

      • #1435110

        Most the test sites do seem to like that kind of password. I may be changing some of my passwords ……:huh:

        🍻

        Just because you don't know where you are going doesn't mean any road will get you there.
    • #1435111

      Maybe I lack imagination but I find it really hard to believe that correcthorsebatterystaple is any kind of secure password. What am I missing here??

      The “new techniques of dictionary attacks” article was about using phrases containing words which appear together somewhere online.

      The correcthorsebatterystaple example is about using random words which don’t normally appear together anywhere.

      (Although that particular example now appears in thousands of places!)

      Bruce

      Windows 11 Pro version 22H2 build 22621.2361 + Microsoft 365 + Edge

    • #1435170

      Adding capitalisation, numbers and punctuation bounces the result out nicely and it’s no harder to remember (I changed the last word to keep the length the same).
      c0rrecthorse.batterystraP
      Massive Cracking Array Scenario = 89.14 trillion trillion centuries

      cheers, Paul

    • #1435235

      Trouble is that some sites won’t accept passwords with full stops and similar, and other sites limit the password length (but don’t always tell you!). I have one site which uses a PIN – four numbers!

      Eliminate spare time: start programming PowerShell

    • #1435242

      Any site that limits your password choices to less than 16 characters and only numbers and letters should be taken out and shot.

      cheers, Paul

    Viewing 4 reply threads
    Reply To: password conundrums

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: