Tuesday, March 6, 2007

Passwords & "Passphrases" part 2:

In the last post I mentioned how we need to get away from a “password” and move to "pass phrases”. Their longer length and (hopefully) use of lower and upper case along with punctuation and other tricks make it more difficult for hackers and others to break into our PCs.

I’d like to share a few more thoughts with you about passwords and “passphrases”.

It goes without saying that a strong “passphrase” will protect you much better than a weak password.

But you have to be careful with even a strong “passphrase”.
If you use a favorite saying, or a favorite book title as your “passphrase”, it may still be broken by someone.

HOW? Lets say that your teenage son or daughter asks to use your PC because their PC isn’t working and they need to print out a homework paper. So you give them your “passphrase”. OR they may have a friend over and you give your child the “passphrase” not even thinking that the friend of your child now knows your “passphrase.”

In the event someone else needs to use your PC you need to type it in for them. DO NOT give it to anyone. Once you give it out you yourself have compromised the “passphrase.”

Another thing to keep in mind is the email that “friends” send “friends.” This email asks for personal information about you. This is so your email friends can get to know you. They may ask silly questions like your pets name, your favorite movie, when you were married, etc.

Also be careful of the information you post of “my space” as well and for the same reasons.

This information is a treasure trove of possible passwords / “passphrases” for those who might want to break into your PC.
Never respond to such emails. And however hard it is try to keep yourself (and your children) from posting too much personal information on “My Space”.

And if you have….posted this information OR given your child or their friends your password / “passphrase”…you better change your “passphrase” ASAP.

If you check the little boxes that say “remember my log in information and or password” You’ll need to change them as well.

Don’t take this too lightly. The skillful hacker can get enough info from oen of these”friends” email or “my space” to get your account information from ISP’s like AOL. Or they might be able to access yout account info on Amazon or other sites.

No comments:

Labels