Fools

[YosemiteSam]

Gawker was hacked and 188k passwords exposed.

The most common where:

I wonder what percentage of you have those or use "cowboyszone" as your password here. :laugh2:

Don't be a dummie, use a real passwords. Change it immediately!


Link to the WSJ Article

 

[MonsterD]

I love password. People are crazy, I would rather make up a hard one then forget it, rather than make it one of those.

 

[BrAinPaiNt]

I have 5-10 passwords I use on various accounts.

Try to stick to using the ones on that mental list so if I forget, I can just go through the check list.

None of them are those on that list as they are too obvious.

 

[YosemiteSam]

I have 5-10 passwords I use on various accounts.

Try to stick to using the ones on that mental list so if I forget, I can just go through the check list.

None of them are those on that list as they are too obvious.

BrAinPaiNt
Dean
Guitar
backdoorsanta
mountaindew


Whoops, better change them now. :laugh2:

 

[Yeagermeister]

They either have an easy one or it's written on a sticky taped to the side of the monitor. :laugh2:

 

[BrAinPaiNt]

BrAinPaiNt

Whoops, better change them now. :laugh2:

:laugh1: No that is not one of them.

I have to assign passwords to users across the state for DHHR. I always mix them up and add a number or two to them. Ideally I would add a number and a symbol but some of these people have enough trouble remembering their own names :

 

[YosemiteSam]

They either have an easy one or it's written on a sticky taped to the side of the monitor. :laugh2:

...or both. :laugh2:

 

[BrAinPaiNt]

They either have an easy one or it's written on a sticky taped to the side of the monitor. :laugh2:

I like when they let IE save it for them, then when the browser is cleared they don't have a clue what the password OR username is.

I get so tired of...It usually is just there. It is even funnier when they are on a different or new computer and can't understand why the username and password is not saved on it.

Sometimes I will tell them that the state found out that they are working for the russians so they took away their access to the system.

 

[trickblue]

Pretty stupid of people... I coulda guessed most of those...

I use studmuffin69 on almost all my accounts...

Oh wait...

 

[Yeagermeister]

I like when they let IE save it for them, then when the browser is cleared they don't have a clue what the password OR username is.

I get so tired of...It usually is just there. It is even funnier when they are on a different or new computer and can't understand why the username and password is not saved on it.

Sometimes I will tell them that the state found out that they are working for the russians so they took away their access to the system.

I'm glad it's not just our users that do that :laugh2:

 

[theogt]

Doesn't seem all that foolish. As this shows, if someone wants a password, they can get it. Simply having a randomized password vs. a more obvious one doesn't prevent anything.

Nothing annoys me more than ridiculous password requirements with upper and lower case, non-alpha-numeric characters, etc. That is a complete waste of time and provides no security whatsoever.

 

[Kangaroo]

I said for ten years if I can get inside a company I can hack into their network easy

People put there passwords for work written down in easy to find places under the keyboards on a yellow sticky, right on their monitor, open desk draw. people are generally complete idiots when it comes to basic passwords this includes your more highly educate people. The ones that memorize volumes of books but can not remember their freakin password .

The best thing is when you upgrade your password standards at a company and they are not allowed to use things like their birthday or name in the password you can actually see their brian start to melt from the sheer panic

 

[vta]

Something tells me people choose their passwords based on the level of importance per site. What's the worst that could happen at gawker? Someone is going to write some nonsense under your account name?

I use junk passwords for junk sites too, because I really only provide one to things like that, because they forced me to.

 

[MonsterD]

Doesn't seem all that foolish. As this shows, if someone wants a password, they can get it. Simply having a randomized password vs. a more obvious one doesn't prevent anything.

Nothing annoys me more than ridiculous password requirements with upper and lower case, non-alpha-numeric characters, etc. That is a complete waste of time and provides no security whatsoever.

Quick someone put this into Cowboyszone's login- User:theogt password:tgoeht

 

[TheCount]

If I have this straight, these are passwords people used to log into Gawker? Who needs a secure password for that?

I keep my passwords for forums and the like very simple, but passwords for important things like Banking, Investments, Porn, etc. are completely different and more secure.

In fact, I will NEVER use one of the passwords I use for things like banking on anything like a web forum, THAT would be foolish.

 

[Teren_Kanan]

I have 2 passwords I use for everything. It's a really bad idea but whatever.

 

[big dog cowboy]

Pretty stupid of people... I coulda guessed most of those...

I use studmuffin69 on almost all my accounts...

Oh wait...

Waaaaaaaay too much information.

 

[Hoofbite]

If I have this straight, these are passwords people used to log into Gawker? Who needs a secure password for that?

I keep my passwords for forums and the like very simple, but passwords for important things like Banking, Investments, Porn, etc. are completely different and more secure.

In fact, I will NEVER use one of the passwords I use for things like banking on anything like a web forum, THAT would be foolish.

:laugh2:

 

[YosemiteSam]

Doesn't seem all that foolish. As this shows, if someone wants a password, they can get it. Simply having a randomized password vs. a more obvious one doesn't prevent anything.

Nothing annoys me more than ridiculous password requirements with upper and lower case, non-alpha-numeric characters, etc. That is a complete waste of time and provides no security whatsoever.

Whoa, you know nothing of what you say. To say using letters (upper & lower case) along with non-alpha-numeric characters is a complete waste is ignorant. Simple math will tell you that.

If you only use lowercase letters and a password of 5 characters in length there are 11,881,376 possible passwords. The problem with this? (not that it even matters with todays computers) Crackers know that you aren't using random letters. So instead of a straight up cycling through every possibility, they do a dictionary brute force attack. In the Oxford dictionary there are less than 200,000 words. (1/66th as many possibilities) Depending on the medium used that is being cracked and the computational power of the processor being used, the 11.8M possibilities can be cracked almost instantaneously.

These security guys did a test on a few different passwords and checked out how many attempts it took to crack them. Here was the outcome.

The following tests were done with Distributed.net to see how effective the types of passwords were. The first word is the password, the large number is how many attempts it took before it figured out the password, and the time listed afterwards is based on how long it would take a fast dual core processor to crack the password using brute force.

• darren: 308 million (30 seconds)
• Land3rz: 3.5 Trillion (4 days)
• B33r&Mug: 7.2 Quadrillion (23 years)

Don't be a fool as the title of this thread says.