Password Security!

Started by Dave KochNovember 13, 20132 replies2,149 views

Dave KochNov 13, 2013 at 10:03 pm

Believe it or not, I actually hang out on a couple other forums. One- Macrumors- is VERY big- 17MM posts (ahhh, someday!)

Anyway, yesterday, they were hacked, you can read bout it here: MacRumors hacker who took 860,000 passwords speaks: “We’re not terrorists” | Ars Technica

It is interesting to note that on their site, the post explaining what has happened has a couple posters asking that the forum software be updated to XenForo... which is what we are not using! So there is an endorsement... (MacRumors Forums: Security Leak - Page 6 - MacRumors Forums ) Someone even wrote:

Almost got excited thinking it was an update to XenForo (more secure and faster).

That makes me feel good, like we chose the right forum software.

In any case, now is a good time to go over password and forum security. I would suggest HIGHLY to all of you to get a password manager. I personally use Lastpass (LastPass | The Last Password You Have to Remember ) and I suggest you get it, too. It can and will remember ALL your passwords, and recall them when you need them. It does other things, too. But it is strong, encrypted and works well. Get it, then install it. THEN US IT!

When you choose a password for Lastpass, make it as strong as you possibly can. Use capital letters, numbers and symbols. DO NOT USE WORDS! Abbreviate a famous sentence is good---- like Four score and seven years ago.... 4sa7ya. Now add random caps.... 4sA7Ya add some symbols: 4s&A7Ya$

Now you not only have something that is hard to decode, but something you can remember.

For your MASTER password for Lastpass, I would make it AT LEAST twice that long... 15-20 digits would be ideal.

(There is also an Internet comic doing around that shows it good to use four unrelated words as a password... the "horsebatterystaple" theory. This works. But its even better with numbers AND symbols added.... and even better if they are randomly inserted!)

Lastpass will suck up any existing passwords you have from your browsers, and start remembering new ones as you go along, so long as you use it all the time. DO THAT!

You can have Lastpass randomly generate a new, unique password for every site you visit.... DO THAT!

Do NOT have ANY passwords anywhere that are duplicates. Change them if they are.

I think this is about the best you can do, and this is what I recommend to you.

oneuglybunnyNov 14, 2013 at 2:29 am1 like

Something similar happened at DeviantArt about a year ago. Someone using a "dictionary 'bot" managed to crack a number of user accounts and wreak some minor mayhem. In response, DeviantArt gave a tutorial on how to make strong passwords. Thus, I changed mine to a fifteen character code that includes numerics, and many of the characters from foreign alphabets, which are called Extended Characters. According to the Password Evaluator that dA referenced, a hacker will need 17.2 decillion years to stumble across my password.

Therefore, *chortle* I don't see myself worrying about this. :)

saltybootNov 15, 2013 at 2:09 am

I make sure my passwords are not simple. However, I like the idea of using foreign alphabets.

This discussion is from the forum archive. Replies are not open yet.