paper: Basic Password Security

[Travis Schuh]

Originally Posted by Pavan

Also keep in mind that although it has been common for gaming and clans, there has been an exponential increase in the amount of brute force programs being created and being used, so keep that in mind next time you make your password, characters like "Æ, æ, ™ " are not usually put in those algorithms. For more information on ALT + NUM keys click here.

Thanks for the site. This opens up lots of new password opportunities, as now I can put in symbols formed by ALT + (Team number).

-Travis

[Quzarx]

I personally prefer using a md5 hash of an md5 hash of a word for my passwords. Yes, bit harder to memorize, but quite difficult to crack.
Such as, the md5 of "test"
098f6bcd4621d373cade4e832627b4f6
The md5 of that:
fb469d7ef430b0baf0cab6c436e70375

[fimmel]

Originally Posted by Quzarx

I personally prefer using a md5 hash of an md5 hash of a word for my passwords. Yes, bit harder to memorize, but quite difficult to crack.
Such as, the md5 of "test"
098f6bcd4621d373cade4e832627b4f6
The md5 of that:
fb469d7ef430b0baf0cab6c436e70375

i may try doing that. sounds like fun memorizing hashes.

also i set up a website one time and when i went into phpmyadmin to look at the user table. the passwords were in PLAIN TEXT. that means that any admin or even a hacker that got access to that table in the database would have all of the user names, passwords, emails etc of the users. anyway i decided to not use that script for the login.

/forest

[DonRotolo]

Originally Posted by GaryV1188

It must be exactly X characters long or some other such restriction. I like the concept though - I sure have difficulty remembering all my passwords when I go to pay my monthly bills online.

Yep, there might be some excpetions - but I never have trouble remembering any of my passwords, so far...

Originally Posted by Pavan

even if somebody gets your password on CD they can ruin your name

Yes, and if you're dumb enough to use the same password for everything, they can do quite a bit more... Maybe not to a high school kid, but think mid-life engineer and what "ruined" might entail.

Also, with no extra effort - actually less effort than your layer system - you can use strong and unique passwords everywhere. Why not then?

Originally Posted by Quzarx

I personally prefer using a md5 hash of an md5 hash of a word for my passwords.

You, my friend, win the Uber-geek award for today.
(Anyone who knows what he means is a runner-up)

Don

[Protronie]

I don't care how "strong" a password you use... if someone wants the info enough they will get it. There are always backdoors the industry and government agencies have embedded into your O/S.

If theres something you don't want someone to see... don't trust it to the internet or a computer thats hooked up to it.