Skip

20 posts tagged with passwords.
Displaying 1 through 20 of 20. Subscribe:

Dropbox (not) hacked, but hackers claim 7 million accounts for sale

ArsTechnica: "7 million Dropbox username/password pairs apparently leaked" Reports started to come in late Monday evening about the cloud file storage service Dropbox having been "hacked" by a group that was offering up the complete list of millions of email+password combinations for Bitcoin donations. Later reports, including a statement by Dropbox, point to the potential list being several million combinations culled from various third-party sites, and then tested against Dropbox. [more inside]
posted by Celsius1414 on Oct 14, 2014 - 79 comments

m01$tRoACh31!4

Passweird - Passwords too gross to steal. This website will create for you a password that is not only secure*, but is also so utterly repulsive that not even the most hardened criminal, identity thief, NSA agent, or jealous boyfriend would ever want to use it. *ish, but probably not. Don't use these for real.
posted by Rock Steady on Dec 30, 2013 - 28 comments

Beyond brute force.

Anatomy of a hack: How crackers ransack passwords like “qeadzcwrsfxv1331” Hackers get %90 of an MD5 password database using multiple analysis techniques including Markov chains, mask, combinator and hybrid attacks. These attacks combine dictionaries of previously-recovered passwords and passphrases with brute force and statistical analysis to expand the power of password cracking.
posted by CBrachyrhynchos on May 28, 2013 - 153 comments

A Thought on Web Security

I long for the future where I can safely assume my passwords are stolen.
posted by stoneweaver on Apr 29, 2013 - 20 comments

The age of the password has come to an end...

Mat Honan of Wired has a covetableTwitter username (@mat). Recently hackers tore his digital world apart in an attempt to commandeer it. Now he reflects: The age of the password has come to an end; we just haven’t realized it yet. And no one has figured out what will take its place. What we can say for sure is this: Access to our data can no longer hinge on secrets—a string of characters, 10 strings of characters, the answers to 50 questions—that only we’re supposed to know. The Internet doesn’t do secrets. Everyone is a few clicks away from knowing everything.
posted by rongorongo on Nov 16, 2012 - 75 comments

And change the combination on my luggage!

What are the most common and least common 4-digit PINs? Using data from recent password database leaks, an analysis of PINs. (via Schneier)
posted by fings on Sep 19, 2012 - 91 comments

"Your password cannot be a personal statement."

What if feels like to reset your password online. [slyt] [via]
posted by quin on Aug 24, 2012 - 54 comments

Tell The Man to get out of your Face(book)

Illinois (joining Maryland) bans employers from requesting applicant or employee social networking passwords. [more inside]
posted by Eyebrows McGee on Aug 1, 2012 - 65 comments

Choosing good passwords

Choosing good passwords - a straightforward real-world guide for the average user, by AusCERT. Also includes links out to a fun and informative piece on The Top 500 Worst Passwords of All Time, and more in-depth material aimed at the tech and security savvy, like this enjoyable conference talk: Security As If Your Life Depended On It (because it might!). So we can avoid becoming xkcd cartoons.
posted by philipy on Feb 26, 2012 - 71 comments

"Your mother sells whelks by the hull"

"One in three teens has shared a password with a friend or significant other." [more inside]
posted by jeffburdges on Jan 24, 2012 - 62 comments

Spill, Then Poof

When you send people passwords and private links via email or chat, there are copies of that information stored in many places. If you use a one-time link instead, the information persists for a single viewing which means it can't be read by someone else later. This allows you to send sensitive information in a safe way knowing it's seen by one person only. Think of it like a self-destructing message, a One Time Secret.
posted by netbros on Dec 16, 2011 - 35 comments

"We noticed an issue yesterday...:

In last week's post about the PSN security breach, several MeFites recommended LastPass for storing passwords. Well, yesterday they found some anomolous network traffic, and they're asking all users to update their master password. (Some notes from James Fallows of The Atlantic. One guy explaining why you shouldn't freak out. Ask MeFi: "What simple, secure, portable password and secure data management systems do you use?")
posted by epersonae on May 5, 2011 - 97 comments

iTunes Scammers At It Again

A thread at Apple's Support site has popped up with frustrated users describing nearly identical iTunes account disruptions: up to hundreds of dollars of charges are being racked up by fraudulent buyers, using iTunes gift card balances and even credit card information to fund the purchases. [more inside]
posted by Khazk on Mar 9, 2011 - 71 comments

Bring It On.

An anonymous hacking outfit called "Gnosis" has infiltrated Gawker Media, hijacking the front page and leaking the company's internal chat logs, source code, and content databases along with the usernames, email addresses, and passwords of over 1.3 million users (including Gawker staff). The attack, which was motivated by what the group describes as the "outright arrogance" with which the company's bloggers taunted anonymous imageboard 4chan (semi-previously), affects every site in the Gawker network, including Gizmodo, Kotaku, Lifehacker, Jezebel, Deadspin, Jalopnik, and io9. While most of the leaked passwords are encrypted, more than 200,000 of the simpler ones in the torrent file have been cracked, and the links between account names and email addresses are in plaintext for all to see. Since the integrity of Gawker's encryption methods remains in doubt, it is recommended that anyone who has ever registered an account on any Gawker property change their passwords immediately, especially if the same log-in information is used for other services.
posted by Rhaomi on Dec 12, 2010 - 312 comments

I'm in ur address book, callin ur peeps

How secure is your password? If you're like some people, it's probably not secure enough. When did you last change yours?
posted by chuckdarwin on Jun 13, 2007 - 66 comments

Myspace Passwords

An Analysis of 20,000 Myspace Passwords
posted by matkline on Sep 18, 2006 - 41 comments

Pre-Brute Forced Password Cracking

RainbowCrack Online aims to enable anyone (who'll pay their subscription) to crack a password given the password hash, and get the clear-text password back instantly by looking it up against their 500GB Rainbow Table. Of course, you've been able to use John the Ripper or l0phtcrack to do this using your own computational power (and time) to crack a password before (or do it online) but now it's just Click and Crack... You still not using shadows?
posted by benzo8 on Nov 11, 2005 - 16 comments

$$$P0--ahgo6

Write down your password. Bruce Schneier, Author of Applied Cryptography and founder of Counterpane security is urging people to write down their passwords.
posted by delmoi on Jun 21, 2005 - 68 comments

If your web site is hosted by ADDR.com, you need to read this MSNBC report immediately. Passwords and credit card numbers appear to have been stolen.
posted by netbros on Apr 2, 2001 - 3 comments

Does it bug anyone else

Does it bug anyone else that if you have a MetaFilter account with cookies enabled, it automatically enters your password (which can be read in view source)???
Personally I think this is a very bad thing, as I've visited metafilter at the library a few times..
posted by Bane on Jun 28, 2000 - 15 comments

Page: 1
Posts