PDA

View Full Version : Are you guys the same way?



dboat
09-06-2004, 12:31 PM
In that a fair number of passwords and/or logins are L related?

For me, they are car related, but not all L related.

How about you?
Dana

Silver_2000
09-06-2004, 01:14 PM
My passwords are complex and change often ...

Being a Domain Admin at work requires it -

So I use similar standards for off work passwords as well...

blueoval01
09-06-2004, 08:24 PM
Same here. None of my passwords relate to where I am.
Course, do I really know where I am and what I'm really doing here? :rll:

:beer:

99WhiteBeast
09-06-2004, 09:07 PM
Since my work requires the Sarbanes Oxley compliance I tend to use a similar format

my2002lightning
09-07-2004, 12:12 AM
Some log-ins yes and some no.

As for passwords on previous jobs back in the day, I would change my Production system passwords to everything from "ballerina" stage-names:D , girls on AIM I was chatting with, my dog's name and random significant dates thrown in between words.

FYI, they say some hacking software can hack past words and guess them, so it's a good idea to make, say, "precious" spelled like "pr3c!ou5". Hacking software supposedly chokes on numbers in phrases, so I've heard.:cool:

While on topic, one tool in this area that has helped me many times is http://www.snadboy.com/

For example, if your an Admin. and you see someones ID/PW is say "my2002lightning/**********", you can pass the cursor/pointer over the ********s and it will show the encrypted password.
How cool is that? I've used it before on previous gigs and it works.knana

Ronald

Silver_2000
09-07-2004, 08:03 AM
Some log-ins yes and some no.

As for passwords on previous jobs back in the day, I would change my Production system passwords to everything from "ballerina" stage-names:D , girls on AIM I was chatting with, my dog's name and random significant dates thrown in between words.

FYI, they say some hacking software can hack past words and guess them, so it's a good idea to make, say, "precious" spelled like "pr3c!ou5". Hacking software supposedly chokes on numbers in phrases, so I've heard.:cool:

While on topic, one tool in this area that has helped me many times is http://www.snadboy.com/

For example, if your an Admin. and you see someones ID/PW is say "my2002lightning/**********", you can pass the cursor/pointer over the ********s and it will show the encrypted password.
How cool is that? I've used it before on previous gigs and it works.knana

Ronald
Dictionary attacks are just that - tHey try every word in the dictionary looking for a hit ... BUT they are dependant on having no account lockout policy in place - it takes millions of attempts to grind a password that way

As far as the **** windows doesnt encrypt it - just hides it - the password is stored in plain text - just not visible

Tex Arcana
09-08-2004, 08:51 PM
Some log-ins yes and some no.

As for passwords on previous jobs back in the day, I would change my Production system passwords to everything from "ballerina" stage-names:D , girls on AIM I was chatting with, my dog's name and random significant dates thrown in between words.

FYI, they say some hacking software can hack past words and guess them, so it's a good idea to make, say, "precious" spelled like "pr3c!ou5". Hacking software supposedly chokes on numbers in phrases, so I've heard.:cool:

While on topic, one tool in this area that has helped me many times is http://www.snadboy.com/

For example, if your an Admin. and you see someones ID/PW is say "my2002lightning/**********", you can pass the cursor/pointer over the ********s and it will show the encrypted password.
How cool is that? I've used it before on previous gigs and it works.knana

Ronald

Iv'e got a better system: either use Knoppix or FIRE on a bootable CD, and bypass the system altogether, then use a nice likke Linux utility that boots off a floppy to recover and reset the admin password, available here (http://home.eunet.no/~pnordahl/ntpasswd/)

Works nice, too. I sold a machine to a friend, but I forgot the password, so we got in with that, reset the password to null, and bang, we be in. M$ is soooo secure. Not. :d

EDIT: my passwords have little to do with me, and are NOT related to anything automotive. My main passwords for email and my machine are titles of books, actually, and a minimum of 15-20 characters, and are easy for me to remember, and damn near impossible for a hacker to figure out, unless they happen to have the 1000+ books I happen to own, and know whick ones I used.:D