by Lee Mathews on January 21, 2010 at 12:08 PM

Password breaches happen on a pretty regular basis, but the one at Rockyou.com was massive -- involving 32 million users. Now that the dust has settled, security firm Imperva has taken the time to do a little analysis of the data involved.
Verdict: it's 2010, and people are still using the stupidest passwords imaginable.
Here's a quick look at the top ten:
123456
12345
123456789
...
by Jason Clarke on November 26, 2009 at 11:00 AM

There has been a lot of attention given to some recent iPhone hacks that potentially affect users of jailbroken iPhones, especially now that a malicious attack has been discovered. If you've jailbroken your phone, and you are worried about whether you are potentially vulnerable, here's a simple answer: If you have not installed OpenSSH (or any other SSH package), you are not vulnerable to the ...
by Jay Hathaway on October 6, 2009 at 03:00 PM

Over 30,000 email addresses have been compromised, with their login info posted online, in the past few days. The BBC has apparently seen the list, and it includes Hotmail, AOL, Yahoo and Gmail users. None of those companies are to blame, though, because the owners of the email addresses got caught in a phishing scam. In case you're not already in the habit of making sure you're not giving your ...
by Lee Mathews on September 3, 2009 at 05:00 PM

LastPass, the secure password management and form filler that was first released for Firefox and Internet Explorer, has welcomed another browser into the fold. Mac users running Safari for their browser can now run a full LastPass plugin rather than relying on the Javascript-powered bookmarklet. Just head over to the LastPass homepage and click 'get LastPass.' As you can see in the screenshot, ...
by Lee Mathews on May 12, 2009 at 10:00 AM

You've got to hand it to the shifty jackal that came up with #twitterpornnames. It's a brilliant display of two things. First, is underscores the power of trends on a social site like Twitter. Second, it clearly illustrates just how unaware people are as to the nature of scamming on the Internet. What the hell is #twitterpornnames, you say? It's a game that someone started on Twitter. You're ...
by Lee Mathews on November 11, 2008 at 02:00 PM

Back in March, Brad told you about Password Meter, a web app designed to help you create strong passwords. Want to know how long it would take to brute force? Pay Hackosis a visit, and try out their Brute Force Calculator, an Open Source PHP app based on an Excel spreadsheet from Mandylion Labs. Hackosis' calculator asks for details about your password - not the password itself. Using the ...
by Brad Linder on October 27, 2008 at 04:00 PM

Foxmarks is a plugin for Firefox that makes it easy to keep your bookmarks synchronized across multiple browsers. When you add or delete a bookmark on one machine, the changes will be reflected on another. Pretty useful for keeping your home and work computers up to date, right? But what about all those passwords you have saved on one computer but not the other. Now Foxmarks has a solution for ...
by Todd Ritter on October 8, 2008 at 03:30 PM

Since practically every website requires some sort of user registration, I decided to purchase 1Password to manage all of my login credentials. 1Password is a Mac-only password manager that can also store secure notes, "wallet" information, and identity data. Rather than use a single password for all of the websites I access, or try to create a convoluted password algorithm to have a list of ...
by Brad Linder on September 9, 2008 at 04:00 PM

Usable Security Systems is working on a new service that will help you generated secure passwords for each site you visit without having to remember them all. The company made a presentation at the DEMO conference this week and announced that UsableLogin will be available early next year. The system basically lets you use the same password over and over to register and login to different web ...
by Lee Mathews on August 22, 2008 at 02:00 PM

You've no doubt learned to take the various claims software developers make about their products with a grain of salt, but the gang at Lastpass may be right on with theirs. Lastpass may just be the last password you'll ever have to remember. Other DS bloggers have looked at plenty of other options, like Passpack and good ol' Keepass. Lastpass has put together an extremely worthy competitor, and ...
by Drew Olanoff on May 28, 2008 at 02:00 PM

If you've ever tried to sync up multiple copies of Firefox over multiple computers, we feel your pain. The Google sync plugin hasn't been updated since 2006 and didn't even work with the latest release of Firefox. Ugh. Have no fear, Mozilla Weave is here! With Mozilla Weave you can sync all of your bookmarks, history, cookies, saved form data, and now passwords (for the first time!) with any ...
by Brad Linder on May 2, 2008 at 03:00 PM

Now that you know how to import and export your Firefox extensions, you can easily configure Firefox on a new computer to work exactly like Firefox on your old computer. Well, almost exactly. OPIE can take care of your add-ons, but it doesn't export the passwords you've saved in Firefox for the dozen or so sites that you log onto every day. It turns out there's a Firefox add-on for that ...
by Simon Kerbel on March 13, 2008 at 03:00 PM

Have you ever lost track of your password protected files? Maybe during one of your compulsive file-moving and file-deleting extravaganzas? Passware Encryption Analyzer is a free program that will track down all your encrypted and password protected files, no matter where they are hiding on your machine. Whether the files are in the glorious sunlight of your desktop, or in the deep dark cave of ...
by Brad Linder on March 10, 2008 at 08:00 PM

As a general rule, people who don't take security very seriously will tend to use the same password for many services. And they'll make sure that password is easy to remember by choosing a birth date, anniversary, or loved one's name to protect their computer files, bank records, and everything else you can use to steal their identity. At least that's how it works in the movies. If you want to ...
by Simon Kerbel on February 5, 2008 at 06:00 PM

If you use and reuse the same password over and over again, or if you're not very creative when it comes to making up passwords, you might want to head on over to PassPub, a site that automatically generates strong, unique passwords for your immediate adoption. When PassPub first loads, you'll see a selection of 8 character passwords, randomly generated. You can feel free to use any of the ...