agroleft.blogg.se - Funny passwords for work

FUNNY PASSWORDS FOR WORK MOVIE
FUNNY PASSWORDS FOR WORK SOFTWARE
FUNNY PASSWORDS FOR WORK CODE
FUNNY PASSWORDS FOR WORK PASSWORD
FUNNY PASSWORDS FOR WORK WINDOWS

Note that 49.212.7.205 is the IP address of the machine attacking.

suddenly this dictionary attack is not going to work - there's not enough seconds in the day. with just 4 random letters added to your password.

FUNNY PASSWORDS FOR WORK PASSWORD

This is why you should not have a password which is close to a dictionary word or someone's name, or is a password people often choose. They just need to succeed with a few accounts here and there, even though they fail 99.99% of the time. this sort of attack is clicking along, every second of every day aimed at basically all the servers on the internet. It's funny to me that you can see that their list of usernames to try is sort of alphabetical order, and they are just running through it in the most obvious way. No doubt they are trying common passwords, such as "secret" "password12" etc. It happens that the username for each attempt is printed in the log file but the password is not. What you see here is the attacker is trying guess both the username and password on the account. Here's a real "log file" from my server where it routinely records what happens each day. One simple policy is that the Bank can process login attempts at a slowish rate, such one every second to prevent the bad guys from trying 100 billion different passwords. This can cause problems for the legitimate user however, so it's a balance. Since they launch the attack in bulk, just getting a fraction of a percent is worthwhile.Ĭlearly, the bank or whatever should detect thousands of bad logins and slow down or freeze the account.

The bad guy could just go through the list of 100000 common passwords ("password", "password123", "janexyz". There are 86400 seconds in a day, and suppose your bank permits 1 login attempt per second. They might know the username and just guess the password, or more likely they are guessing both.

The bad guy could try to just guess your password, attempting to log in again and again, hoping to get lucky.

Not too hard to make a password they will never guess at 1/second rate.

There is not time to make 100 billion guesses.

1 guess/second = 31 million guesses per year.

The attack fails mostly, but works some percentage of the time with an account with a weak password.

Bad guys will try common passwords as guesses.

Bad guys tries to log in again and again.

as if they are trying all the words in a dictionary

This is the "outside" case - bad guy is outside the site, guessing.

The bad guy could try to guess your password to a site.

FUNNY PASSWORDS FOR WORK WINDOWS

It probably helps that I don't run Windows which is a popular target and has had lots of problems.Ī favorite CS101 question: list all the ways a bad guy can get your password? We'll go through them.

FUNNY PASSWORDS FOR WORK SOFTWARE

I use the internet all day long, I don't have any anti-virus software installed, and I have not had any problems (that I know of!).

I don't have any anti-virus software on my computer, and I have not had any problems (not running Windows probably helps me)Īlthough I'll talk about problems most of the time, don't get all scared.

We'll talk about this typical case first.

If you avoid the most common errors, you will probably be fine.

They send out millions of generic attacks, just snaring who falls for it.

Typically the bad guys are not crafting some attack just for you.

Except "encryption" which nobody can break (a later topic).

Therefore: super-motivated attacker will likely succeed.

They could sneak into your house/hotel at night and tamper with your hardware if the CIA or someone with a billion dollars really wants your files.

Likely to succeed if the attacker has money and motivation.

A specifically crafted and sophisticated attack against a specific person.

In the following sections we'll look at the three most common types of attack, lumping into broad categories: 1.

This lecture is scary, but we're going to be ok.

FUNNY PASSWORDS FOR WORK CODE

trick the computer into running bad guy code

Bad guy cannot just access the bytes inside inside the computer at will.

The computer is like a castle with walls.

There are real threats our there, but staying safe is not that hard.

FUNNY PASSWORDS FOR WORK MOVIE

Computer security is a big and kind of dramatic area which lends itself to movie plots and fear.