Re:Millions of stolen Last.fm passwords have been decrypted....
by tomp on Friday September 02, 2016 @06:57PM
(#12416842)
I wonder how much passwords like "lastfm", "music" and "abcdefg123" are an indication of people just being bad with security, as opposed to people just not giving a damn... Amid the overflow of trivial sites requiring more and more login details, is there really a value in having strong passwords? Personally, I mostly don't care; I have strong passwords for important sites (banks, online stores that have my credit card details), but for the rest of logins, I use pretty trivial passwords - if someone "steals" my account, I'll just create another one!
[ Parent
| on HN ]
Re:Millions of stolen Last.fm passwords have been decrypted....
by LeoPanthera on Friday September 02, 2016 @07:18PM
(#12416907)
But you are the exception. The problem is not really weak passwords, it's re-used passwords. A lot of people just use one password and they use it everywhere, so as soon as it gets cracked once, their accounts can be compromised all over the place.
The best thing I ever did for my parents was teach them to use different passwords everywhere. Against conventional wisdom, I get them to write them down in a book, because for them, keeping a book secure is much easier than knowing what to do to keep their computers secure. We already know how to keep physical objects reasonably secure, we do it every day with our credit cards, passports, jewelry etc.
Re:Millions of stolen Last.fm passwords have been decrypted....
by Myrmornis on Friday September 02, 2016 @07:32PM
(#12416954)
Exactly. Part of the annoyance of passwords is due to the loss of perspective that comes with running a business, SAAS offering etc: you, the owner, may think it's a big deal, but if there are no credit cards involved, the databases of most websites don't contain anything the users really care about. In fact the most sensitive thing they probably hold is the password / hash thereof, because they force people (inappropriately) to use strong and therefore valuable passwords.
Re:Millions of stolen Last.fm passwords have been decrypted....
by JoshTriplett on Friday September 02, 2016 @07:26PM
(#12416937)
Exactly. When a random site demands that you create an account to continue, you might create a throw-away account that you don't expect to reuse.
Worse yet, some such sites intentionally break pasting into the password field, making it a pain to paste in a randomly generated password.
Re:Millions of stolen Last.fm passwords have been decrypted....
by LeoPanthera on Friday September 02, 2016 @07:32PM
(#12416952)
> some such sites intentionally break pasting into the password field
You can fix that with a bookmarklet to re-enable pasting.
var inputs = document.getElementsByTagName('input');
for (var i=0; i < inputs.length; i++) {
if (inputs[i].getAttribute('type').toLowerCase() === 'password') {
inputs[i].setAttribute('onpaste', '');
}
}
(Tested with desktop Safari, no idea about other browsers.)
Re:Millions of stolen Last.fm passwords have been decrypted....
by paulddraper on Friday September 02, 2016 @07:05PM
(#12416869)
But what if they post snarky comments as you on HN?
Re:Millions of stolen Last.fm passwords have been decrypted....
by totony on Friday September 02, 2016 @07:22PM
(#12416918)
That would be disastrous.
Re:Millions of stolen Last.fm passwords have been decrypted....
by SNvD7vEJ on Friday September 02, 2016 @07:34PM
(#12416960)
na, no problem. 'tomp2' is still available
Re:Millions of stolen Last.fm passwords have been decrypted....
by antoineMoPa on Friday September 02, 2016 @07:11PM
(#12416892)
HN is an important site I guess.