OT: Palin's e-mail and a warning

[mike radigan]

The fool who hacked Ms. Palin's e-mail did so by fooling Yahoo into sending him a password reset. He fooled them by being able to answer standard questions that are suppose to help protect you. Rubish. I guess one of the questions was where did you meet you husband. Answer, Wasilla High. I've long held that instead of protecting one, these help hackers. I told my kids and grandkids and I do it myself to use answers that make no sense. For instance, what is your favorite baseball team? Answer, moonstruck. No, that is not one I use, but you get the point. I just think it is wise that others do the same. If you cannot remember your answers, keep a copy in a safe place.

[Indy_BB]

I try

I try to tell the people at work, that if you want to use simple words as your password, just change certain letters into non-alphanumerics. For example, if you want your security question to be, "Where did you go to college?" The answer might be, "Madison." Just make your password, "M@d!s0n", that makes in REALLY difficult to hack, even with a very advanced computer using a brute force attack. Yet, its still simple to remember.

[ph]

I think I've heard that just changing letters in a word is fairly standard and easy to hack. You may have better luck by changing letters in an uncommon acronym (i.e. the first letters of the words in a poem or song)
It was interesting that Steve Balmer (Microsoft CEO) said you could have better security by writing down strong passwords (too long/random to remember) than having memorized "weaker" passwords..

[BU_EMT128]

What it comes down to is that no matter how strong the password, or how strong the encryption software; someone, somewhere, would be able to hack it if they so choose. And T, I hear you on the terror of remembering 5-6 complex passwords as I have to do the same thing... Sometimes 2 complex passwords for different areas of the same system

[mike radigan]

First of all I was referencing the questions that some vendors use to reset passwords not the passwords themselves. That said...

It was interesting that Steve Balmer (Microsoft CEO) said you could have better security by writing down strong passwords (too long/random to remember) than having memorized "weaker" passwords..

This is what I do.

The computer "experts" and the rules, hoops, and hurdles they create to "secure" their systems, have created the very weaknesses that cause their systems to be so insecure.

My bank has an easy answer to eliminate a brute force algorithm (hmmm, did Al Gore invent this). One cannot enter ones username and password at the same time on one screen. It mandates entering a username to bring up another screen for the password.

[Beninator]

My bank has an easy answer to eliminate a brute force algorithm (hmmm, did Al Gore invent this). One cannot enter ones username and password at the same time on one screen. It mandates entering a username to bring up another screen for the password.

This approach makes me feel a little more comfortable as well... But, it is amazing how many banks use the format of entering your username and password on the same screen.

[Braves4Life]

I have my passwords saved in Excel on all computers and have that Excel document password protected in case I forget a password. this is better than writing them down as someone would need the "master" Excel password to access all of the other passwords.

[Dubl R 1]

New Bradley Slogan:

Bradley Braves: Brute Force Algorithms, Can You Hack It?

[mike radigan]

I have my passwords saved in Excel on all computers and have that Excel document password protected in case I forget a password. this is better than writing them down as someone would need the "master" Excel password to access all of the other passwords.

Or hack it as software already exists for this. Click here. I actually do the same, but it on a home computer that is not ever connected to the internet.

[mike radigan]

You could burn the spreadsheet to a CD and then delete the file from your computer.

[SFP]

I use my thumb print scanner to get into my computer and then use a security feature to store my passwords. This allows me to use password with numbers and letters without worrying about forgetting them and wasting time having to secure them again. I believe in the next few years there will be another secure Internet in which financial services will be connected to in which you will have to give up a lot of anonymity to be able to connect into the system. All systems are hackable it's the time, effort and the ability to find the culprits that will keep it to a minimum.

[mike radigan]

I hope he does serious jail time and I don't care which parties are involved.

[SFP]

This guy was an amateur hack. I know guys that can hack away and not leave any information on who they are. One way of being completely anonymous is working from a public computer (public library). I'v worked with some brilliant white hats in the past who can gain access to just about any system they put some effort into.

[Braves4Life]

Or hack it as software already exists for this. Click here. I actually do the same, but it on a home computer that is not ever connected to the internet.

Wow! Who knew? Seems the hackers are always a step ahead. What would you suggest Mike?

[ph]

Or hack it as software already exists for this. Click here. I actually do the same, but it on a home computer that is not ever connected to the internet.

Yes, I often tell users at work that Office security only keeps out innocent people. You should at least contemplate encrypting the Excel file with another encryption program.