January 23, 2010

If Your Password is 123456, Just Make It "HackMe"


January 22, 2010  The New York Post
Back at the dawn of the Web, the most popular account poassword was "12345."  Today it's one digit longer but hardly safer: "123456."
Despite all the reports of Internet security breaches over the years, including the recent attacks on Google's e-mail service, many people have reacted to the break-ins with a shrug.
Why do so many people continue to choose easy-to-guess passwords, despite so many warnings about the risks?  Security experts suggest that we are simply overwhelmed by the sheer number of things we have to remember in this digital age. (Gee, really?)
"Nowadays, we have to keep probably 10 times as many passwords in our head as we did 10 years ago," said Jeff Moss, who founded a popular hacking conference and is now on the Homeland Security Advisory Council.  "Voice mail passwords, A.T.M. PINs and Internet passwords - it's so hard to keep track of."
I, myself, find myself in a real quandry.  Why is it that now that I am older and find it harder to remember things, there are more things to remember?  Grandpa and I needed to start a notebook next to our computer to note all the passwords we are accumulating and I will be the first to admit that I have had to refer to it more than once!  One day I was locked out of Facebook for the entire day because it was one that I did not write down because "oh, I'll remember that one"...don't count on that!  I have NEVER used a Tyme machine because it required a PIN number.  I still write checks at Walmart so I don't have a card to swipe and have to enter a PIN number.  What does PIN stand for, anyways?  Or, is that something they are not allowed to give out unless you have the password?
I think I've figured it out.  Don't try to be "cutesy".  It's the first one you will forget, guaranteed.  Think simple but sneaky, common but with a twist.  And, for cripes sake, whatever you do.....don't use your birthday anywhere in a password.  And, you do realize what this means, don't you?  We are not a name any more but a number, or 10 or 20 different numbers or letters or a combination of both.  Have at least 3 versions of your password because, hey.....you've been there.  You try to sign up with your usual password and you get the "no symbols allowed" or "limit 9 digits" so be prepared to beat them at their own game. 
It all comes down to the fact that we no longer have names but we are numbers (or symbols, if allowed).  Even at fast food restaurants....you go into McDonalds and you order a "#1 with a soft drink".  Why did it have to change to numbers?  What was wrong with "Big Mac, Large Fries and Large Soft Drink".  Was that too much for people to say or are the people working at these places of the generation of "number please" and wouldn't know a burger if it walked up to them without a number stamped on it?
Jeff Moss who founded a popular hacking conference and is now on the Homeland Security Advisory Council suggest that you have a password that are at least 12 characters long which would make your password harder to "crack" than those that use five- and six-characters.


I think I'll just change all of my passwords to BS4U and let them try to figure out if I am swearing at them or not when in actuality, I'm using my initials.

No comments: