Heartland

http://arstechnica.com/security/2013/05 ... passwords/

If you use anything other than a properly randomised password, CHANGE IT. Here is a sample of supposedly secure passwords that crackers have broken quickly and easily:


If possible, use something like KeePass

Lesson: never store plain password hashsums, always use them with a salt (random initialization vector). That is pretty common knowledge. From the screenshot above, it is obvious this simple method has been omitted from that list of hashes, for whatever reason. Also, make sure your password db doesn't get stolen.

If you read the accompanying article, even salting passwords doesn't help much if the site uses crappy hashing like MD5 or SHA1.

I always use the same password: **********

Let 'em try to crack THAT

(and always use a semicolon in your password, H4X0Rz love that little character)

IZ.

Izzy HaveMercy wrote:I always use the same password: **********

Let 'em try to crack THAT



IZ.

I can't say as I really understood all of it, but I thought the section "Anatomy of a Crack" would have been more interesting

what, hunter2?

(clicky for the uninitiated)

(Edit: that was @Izzy)

markfiend wrote:what, hunter2?

(clicky for the uninitiated)

(Edit: that was @Izzy)

IZ.

Oh, crap, that was mine password to gmail.
(Like google didn't read my e-mails).