Are you sure you are who you say you are?
It seems like a month doesn’t go by without another story of a website getting compromised and the site’s user passwords being splattered all across the internet. The latest big, publically exposed occurrence was with the Gawker group of websites (Lifehacker, Gizmodo and a number of others) where the entire user database was exposed to the darker side of the internet. Unfortunately, this had a large flow-on effect, as a large number of people who had accounts that were compromised had followed two fundamental flaws when setting their passwords – they had both used easy passwords, and had reused the same password all over the place. This resulted in a far more wide reaching problem then just silly comments being posted on a website with a limited audience.
The lesson to be learnt here is it’s really important to follow good password practice. Here’s some key tips:
a) Use strong passwords – firstly, where possible, use passphrases (sentences) as passwords wherever possible. These have the benefit of both being easy to remember and also being very difficult to break by the bad guts using brute force methods. If your service doesn’t allow this, other useful ideas include taking the first letter of each word in a sentence to create gibberish that also is meaningful to you. See http://bit.ly/GoodPasswords for some more ideas.
b) Use different passwords – the easiest way is to have a good base password and then add something for each site to change that password – for example, add something financial to your internet banking password, something about shopping to your trade me password, etc. With this in place, if the worst happens and one site does get hacked, the bad guys will only manage to get one of your passwords.
Try following some of these suggestions, and help make sure that only you can say who you are online!
Posted in Community, News commentary, Technology overview |
No Comments »
