In the news:
http://www.smh.com.au/technology/security/hotmail-hacks-easy-as-123456-20091008-go3f.html
...
Password security was thrown into the spotlight this week after it was revealed that 10,000 Hotmail user names and passwords had been leaked online. A day later, a separate list of 20,000 addresses and passwords for Gmail, Yahoo and AOL were found on the web
...
Bogdan Calin, of Acunetix, found "123456" and "123456789" were the most common, appearing 82 times, while 12345678, 1234567 and 111111 also appeared in the top 10.
Furthermore, 42 per cent of the passwords used only lower case letters from a to z. Just 6 per cent mixed letters and numbers.
The longest password was 30 characters - lafaroleratropezoooooooooooooo - but this still evidently did not prevent the user's account from being hacked. The shortest password was one character: ")".
"A big majority of users still use very poor passwords," Calin concluded.
...
The news article reminded me of a joke I read before (copied from another site):
D: Your maniacal tech guy
IT: poor young(20 something) kid who has no sense of humor
S: Supervisor who has even less of a sense of humor
HR: Dynamite HR woman in charge.
IT: Hey Tech, I have to run updates on your system. Tell me your password so i can log in.
D: What.
IT: What is your password?
D: Yes it is.
IT: Tell me your password Tech.
D: What.
IT: Your Network password.
D: What.
IT: Tell me your password.
D: What is my password.
IT: You gonna tell me your password?
D: Yes.
IT Then Tell me your password dammit.
D: What is my password
IT: Dammit tech, I'm getting your boss.
(IT goes to my supervisor, returning)
S: Tech, IT needs to get into your system. Tell me your password so I can log you in.
D: What
IT: He's been doing this for 10 minutes.
S: What is your password Tech?
D: Yes it is.
S: Are you going to tell me your password or am I going to take you into HR?
D: I'm telling you the password.
S: Well what is your password?
D: Yes it is.
IT: He's not telling us. Take him to HR.
S: Tech, I'm going to have you written up. Tell me your password.
D: What is my password.
S: Ok, come with me.
(marches into HR's office, who knows I am a smartass, but likes my sense of humor)
HR: Ok, what's the problem.
IT: I need his computer password, but he won't give it to me.
D: I am.
S: I asked himi too, but he won't tell me as well.
D: I am telling you the password.
HR: Ok, Tech. I am going to ask you. What is your password.
D: Yes.
HR: Tell me your password.
D: What.
HR: What..... Oh hell.
(scrawls "what" on a post it note, handing it to IT.)
HR: He WAS telling you the password. What IS his password.
IT: I've been trying to--(looks at paper, then at me, and leaves in a huff) Damn smartass.
S: You mean--
HR: Yeah, Tech here was telling you all along.
D: A password has to be 2 things: 1, easy for you to remember. 2, Impossible for people to figure out.
S: Ok, you've had your fun. get back to work.
next day, all 4 letter passwords were deleted and had to be changed.
發表於 
返回列表
