[olug] (no subject)

[Kevin]

I remember a while back listening to Steve Gibson on Security Now! talk
about the death of clever: hackers know all about changing an E to a 3,
swapping 1, lowercase L, and !, or zero with an O, etc. P@$$w0rd is
effectively no more helpful than "password".

Now I use the random gibberish that PasswordSafe gives me. The Android app
doesn't have Internet permissions, so unless they've found a way around
that, I'm safe. Plus, a week or so of having to type 8 characters of
gibberish on a daily basis(I don't like the "remember my password" feature
that comes with anything) and I've got them all memorized.
On Nov 6, 2012 6:18 PM, "Jeff Hinrichs" <dundeemt at gmail.com> wrote:

> Snort ..... I laughed out loud.
>
> Best,
> Jeff Hinrichs
> On Nov 6, 2012 6:12 PM, "Hurley, Rod" <RHurley at tenaska.com> wrote:
>
> > Or change them every time we elect a politician that doesn't lie to us.
> >  My password is still Atari64...
> >
> > Sent from my iPhone
> >
> > On Nov 6, 2012, at 6:09 PM, "Jeff Hinrichs" <dundeemt at gmail.com> wrote:
> >
> > > Password Gorilla + dropbox + password safe
> > > Covers Linux, Mac, winblows and android.  Multi-machine
> > > Very capable combo.  All my Pws are 16 chars of random noise
> > >
> > > +1 on google 2 factor too.
> > >
> > > Change your pws when you change the batteries in your smoke detectors.
> > >
> > > Best,
> > > Jeff Hinrichs
> > > On Nov 6, 2012 5:52 PM, "Hurley, Rod" <RHurley at tenaska.com> wrote:
> > >
> > >> 11.52 pffft,I can crack that in 11.51.
> > >>
> > >> Rod
> > >>
> > >> On Nov 6, 2012, at 5:46 PM, "Dan Linder" <dan at linder.org> wrote:
> > >>
> > >>> On Tue, Nov 6, 2012 at 5:18 PM, Jay Bendon <jaybocc2 at gmail.com>
> wrote:
> > >>>
> > >>>> If you use gmail, just add two-step verification to your account.
> > >>>>
> https://support.google.com/accounts/bin/answer.py?hl=en&answer=180744
> > >>>> i use it and its a really simple way to protect yourself.
> > >>>> --Jay
> > >>>
> > >>>
> > >>> Seconded - it's also a benefit that you have to re-authorized each
> > >>> device/browser every 30 days.
> > >>>
> > >>> That plus the LastPass plugin for everything else ($12/year) means I
> > can
> > >>> have 20-character passwords like this "AvZo$I1mjmZ#c at e6vDxw" that
> > would
> > >>> take "11.52 thousand trillion centuries" to crack.
> > >>>
> > >>> (See https://www.grc.com/haystack.htm for the source of that time
> > >> estimate.)
> > >>>
> > >>> Dan
> > >>>
> > >>> --
> > >>> ***************** ************* *********** ******* ***** *** **
> > >>> "Quis custodiet ipsos custodes?"
> > >>>   (Who can watch the watchmen?)
> > >>>   -- from the Satires of Juvenal
> > >>> "I do not fear computers, I fear the lack of them."
> > >>>   -- Isaac Asimov (Author)
> > >>> ** *** ***** ******* *********** ************* *****************
> > >>> _______________________________________________
> > >>> OLUG mailing list
> > >>> OLUG at olug.org
> > >>> https://lists.olug.org/mailman/listinfo/olug
> > >> _______________________________________________
> > >> OLUG mailing list
> > >> OLUG at olug.org
> > >> https://lists.olug.org/mailman/listinfo/olug
> > > _______________________________________________
> > > OLUG mailing list
> > > OLUG at olug.org
> > > https://lists.olug.org/mailman/listinfo/olug
> > _______________________________________________
> > OLUG mailing list
> > OLUG at olug.org
> > https://lists.olug.org/mailman/listinfo/olug
> >
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> https://lists.olug.org/mailman/listinfo/olug
>