Collaborate Disseminate
Why do companies still insist upon using passwords? I’d be very surprised if anyone reading this would say they love passwords. In fact, the weakest links in a cybersecurity defense are usernames and their passwords. Unfortunately, password issues stem… Continue reading World Password Day: I Hate My PA$SW*RD
We are using Symantec PGP encryption for AIX to encrypt/decrypt files. Keys are generated with passphrase and the passphrase are set by the business users. The IT admin is responsible to perform the encryption/decryption of files on monthl… Continue reading PGP encryption passphrase
i want to know what to do after forgetting a passphrase. I’ve deleted and revoked all keys and made a new one but i was hoping that the passphrase would reset for me. to make a newer one. Do i need to uninstall the application to reset pas… Continue reading GPG asks for Passphrase for new key
The two biggest mistakes that people make when it comes to passwords are not using “passphrases” and reusing them across multiple accounts. Over the last decade and more, password requirements have increasingly stressed the need for comple… Continue reading Biggest Password Mistakes: Notes From an Expert
Diceware wants us to actually randomly pick n words from a given set of m=65 words.
Assume a user does not actually use a dice. Instead they take a physical dictionary of m words and “randomly” picks n words.
Can it be some… Continue reading How strong is a password consisting of words arbitrarily chosen form the dictionary?
Example strong diceware password:
widow stout harvey crest zomba zloty butyl
This password will be rejected by most sites, for example by Outlook.com. (Notable exceptions: Gmail, Stackoverflow, which seem to accept this very password (t… Continue reading Given Diceware, why does the requirement to contain uppercase, numerics & punctuation in passwords still stand?
This question already has an answer here:
Patterned password, based on site name [duplicate]
8 answers
I am wondering abo… Continue reading Security of adding letter in front of passphrase [duplicate]
i have ssh private key and i transform it with ssh2john.
Then i do crack with john –wordilist=/usr/share/wordlists/rockyou.txt file.txt but the tool return me No password hashes loaded (see FAQ)
The output of ssh2john (and … Continue reading john the ripper – crack passphrase ssh
Human nature has shown that people re-use passwords, at least for non-work accounts that aren’t requiring quarterly changes. How can it affect your current security that you’ve reused an old password from 2012? Surprisingly, quite a lot. Ha… Continue reading World Password Day: Using a Passphrase to Strengthen Your Security
The PCI DSS requirement 8.2.3 says:
Passwords/passphrases must meet the following:
Require a minimum length of at least seven characters.
Contain both numeric and alphabetic characters.
Alternatively, … Continue reading PCI DSS minimum password strength equivalent in passphrase