During the weekend, the company behind several popular blogs Gawker Media - servers including LifeHacker, Gizmodo, Jalopnik, Jezebel, Kotaku and io9 - have been hacked. Account, including user names and passwords of blog comments were stolen. While this is a problem in itself, it is now causing more problems because many people use the same password for more service. Twitter is currently a surge of spam, what seems to be related to the violation of the Gawker for example.
If you have an account on a Gawker blog and use the same password everywhere on the other hand, it is imperative that you immediately change these passwords (you can find out if an account associated with your e-mail address details were stolen here). Use as an opportunity to set safer passwords on all the services you use. Even if you're currently breathing a sigh of relief because you do not have an account Gawker, now is a very good time to review your password policy.
A password be protected, it must be difficult to guess, as long as possible and consist of a combination of letters, numbers and characters. It must also be unique for each service you use. The problem is that the longer and more difficult to decipher a password becomes, more it becomes to remember, this is why many people use the same password everywhere in the world. The good news is, there are a few strategies that you can use to set secure and unique, yet memorable passwords:
Use a password manager. This is probably the easiest and safest option, and it was that I recommend. It is has several excellent tools available such as LastPass 1Password, KeePass, which can generate and store extremely difficult break unique passwords for each service you use. Because the tool manages passwords for you, you should to worry about forgetting a delicate long password.Use a password hash tool. A password hash tool takes your password, combined with a parameter (perhaps based on the site or domain name) and combine the two with a hash function to create a very difficult to crack the password. As the tool treats the hash for you, just remember the master password. There are several free password hashers as browser modules.Use a strong password policy based on rules. Gina Trapani posted a strategy great password based on rules on LifeHacker in 2006 (if only all LifeHacker readers had actually heard advice!). The idea is that you take a password database and combine them with the name of the service the create password with a set of rules. For example, my password for WebWorkerDaily can be % shjk80aily % (shjk80 easily memorable master password, the final four letters in the name of the service, surrounded by characters for extra security). Applying the same rules, my password for Amazon would shjk80azon %. You can also cancel or rearrange the letters in the name of the service or their nesting with the letters of your master password, for greater security.All the suggestions above require that you set a master password. It is always a good idea to make of this as difficult as possible; cracks Thursday posted here a few tips for secure password parameter.
Share your tips for password below.
GigaOM Pro content (sub req).:
No comments:
Post a Comment