How to Frustrate Password Crackers: 8 Tips

---

Some time ago, I was one of the most prolific contributorsto one of the most popular newsgroups on Usenet.
Thenewsgroup's purpose was to provide fraudulently-obtained,but valid, passwords for websites... Some time ago, I was one of the most prolific contributorsto one of the most popular newsgroups on Usenet.
Thenewsgroup's purpose was to provide fraudulently-obtained,but valid, passwords for websites.The process there is fairly straightforward: someone poststhe web site address of a site that they want (free andillegal) access to. Several group members with colorfulnicknames then "run" the site.
If a valid username/passwordis found, it is emailed to the requestor, who in turnpublicly heaps praise on the grantor, thus inflating his orher ego. My colorful nickname was "PassBandit".Here are some tips to ensure that your account is not theweak account that the other "PassBandit"s of the worldcompromise:1.
The password is more important than the username. Do notassume that because you have an unusual username (includinge-mail addresses), you can choose a simple password.2.
Make your reminder question tough and unique -- somethingsuch as "What was my first pet's name?".3. Do not use your username as the password.
Similarly, donot use a password that "fits" with the username. The may becute, clever, and easy to remember, but username:passwordcombinations such as intel:inside, moody:blues,hewlett:packard, or foghorn:leghorn will be compromised veryquickly.4.
Make every password AT LEAST 6 characters long.5. Use a mix of upper- and lowercase letters, and numbers --and, if allowed, include symbols, i.e., "Hammer*shreW" or"booKbuicK-720".
The more variety your password contains,the less likely that it will be guessed.6. Do not use a single word as your entire password.
Atseveral hundred guesses per second, my software could (andoften did) go through entire unabridged dictionary files,many megabytes in size, and in several languages in no time.Combine two unrelated words, such as bookbuick orhammershrew.7. Change your password frequently if the site gives youthatoption.8.
Do not use the same username/password combination atmultiple sites.I've grown out of "PassBandit", and it no longer holds athrill for me. Instead, I've hopped the fence and teach lossprevention topics.
But there are thousands of "PassBandit"sout there looking to get your into your website stash. Don'tmake it easy for them.
Source: Free Articles from ArticlesFactory.com .