Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.system > #76596 > unrolled thread

Good or bad idea

Back to article view | Back to comp.sys.mac.system

Contents

  Good or bad idea Kurt Ullman <kurtullman@yahoo.com> - 2015-06-14 11:00 -0400
    Re: Good or bad idea JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-06-14 11:45 -0400
      Re: Good or bad idea Warren Oates <warren.oates@gmail.com> - 2015-06-14 12:48 -0400
        Re: Good or bad idea JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-06-14 21:13 -0400
          Re: Good or bad idea Warren Oates <warren.oates@gmail.com> - 2015-06-14 21:41 -0400
      Re: Good or bad idea Barry Margolin <barmar@alum.mit.edu> - 2015-06-14 17:21 -0400
        Re: Good or bad idea Your Name <YourName@YourISP.com> - 2015-06-15 13:13 +1200
          Re: Good or bad idea Barry Margolin <barmar@alum.mit.edu> - 2015-06-15 08:19 -0400
        Re: Good or bad idea JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-06-14 22:20 -0400
          Re: Good or bad idea Barry Margolin <barmar@alum.mit.edu> - 2015-06-15 08:21 -0400
    Re: Good or bad idea Warren Oates <warren.oates@gmail.com> - 2015-06-14 11:47 -0400
      Re: Good or bad idea Kurt Ullman <kurtullman@yahoo.com> - 2015-06-14 12:09 -0400
        Re: Good or bad idea billy@MIX.COM - 2015-06-14 18:19 +0000
          Re: Good or bad idea Kurt Ullman <kurtullman@yahoo.com> - 2015-06-14 17:06 -0400
            Re: Good or bad idea Jolly Roger <jollyroger@pobox.com> - 2015-06-14 21:32 +0000
              Re: Good or bad idea John <Man@the.keyboard> - 2015-06-15 15:21 +0100
                Re: Good or bad idea Jolly Roger <jollyroger@pobox.com> - 2015-06-15 15:32 +0000
                  Re: Good or bad idea John <Man@the.keyboard> - 2015-06-16 02:18 +0100
                    Re: Good or bad idea Jolly Roger <jollyroger@pobox.com> - 2015-06-16 15:26 +0000
                Re: Good or bad idea Barry Margolin <barmar@alum.mit.edu> - 2015-06-15 21:41 -0400
                  Re: Good or bad idea John <Man@the.keyboard> - 2015-06-16 03:48 +0100
                    Re: Good or bad idea Jolly Roger <jollyroger@pobox.com> - 2015-06-16 15:28 +0000
            Re: Good or bad idea Your Name <YourName@YourISP.com> - 2015-06-15 13:11 +1200
              Re: Good or bad idea nospam <nospam@nospam.invalid> - 2015-06-14 23:05 -0400
              Re: Good or bad idea John <Man@the.keyboard> - 2015-06-15 15:23 +0100
          Re: Good or bad idea Don Bruder <dakidd@sonic.net> - 2015-06-14 15:19 -0700
            Re: Good or bad idea Your Name <YourName@YourISP.com> - 2015-06-15 13:19 +1200
        Re: Good or bad idea Barry Margolin <barmar@alum.mit.edu> - 2015-06-14 17:26 -0400
          Re: Good or bad idea Kurt Ullman <kurtullman@yahoo.com> - 2015-06-15 09:12 -0400
        Re: Good or bad idea gtr <xxx@yyy.zzz> - 2015-06-14 19:06 -0700
          Re: Good or bad idea Kurt Ullman <kurtullman@yahoo.com> - 2015-06-15 09:16 -0400
            Re: Good or bad idea Your Name <YourName@YourISP.com> - 2015-06-16 09:15 +1200
              Re: Good or bad idea Kurt Ullman <kurtullman@yahoo.com> - 2015-06-15 19:44 -0400
                Re: Good or bad idea John <Man@the.keyboard> - 2015-06-16 03:01 +0100
                  Re: Good or bad idea Don Bruder <dakidd@sonic.net> - 2015-06-15 20:06 -0700
                    Re: Good or bad idea John <Man@the.keyboard> - 2015-06-16 05:19 +0100
                    Re: Good or bad idea Barry Margolin <barmar@alum.mit.edu> - 2015-06-16 11:00 -0400
                      Re: Good or bad idea Warren Oates <warren.oates@gmail.com> - 2015-06-16 12:51 -0400
                    Re: Good or bad idea Alan Browne <alan.browne@freelunchvideotron.ca> - 2015-06-16 20:50 -0400
    Re: Good or bad idea Siri Cruz <chine.bleu@yahoo.com> - 2015-06-14 08:47 -0700
      Re: Good or bad idea Your Name <YourName@YourISP.com> - 2015-06-15 09:10 +1200
    Re: Good or bad idea Davoud <star@sky.net> - 2015-06-14 12:06 -0400
      Re: Good or bad idea Kurt Ullman <kurtullman@yahoo.com> - 2015-06-14 12:12 -0400
        Re: Good or bad idea Davoud <star@sky.net> - 2015-06-14 21:50 -0400
        Re: Good or bad idea John <Man@the.keyboard> - 2015-06-15 15:37 +0100
        Re: Good or bad idea John <Man@the.keyboard> - 2015-06-15 15:47 +0100
    Re: Good or bad idea "W" <persistentone@spamarrest.com> - 2015-06-14 12:00 -0700
      Re: Good or bad idea Kurt Ullman <kurtullman@yahoo.com> - 2015-06-14 17:21 -0400
        Re: Good or bad idea John <Man@the.keyboard> - 2015-06-15 16:10 +0100
          Re: Good or bad idea Huge <Huge@nowhere.much.invalid> - 2015-06-15 15:14 +0000
            Re: Good or bad idea Tim Streater <timstreater@greenbee.net> - 2015-06-15 18:57 +0100
              Re: Good or bad idea John <Man@the.keyboard> - 2015-06-16 02:54 +0100
                Re: Good or bad idea JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-06-15 23:56 -0400
                  Re: Good or bad idea John <Man@the.keyboard> - 2015-06-16 06:02 +0100
                    Re: Good or bad idea JF Mezei <jfmezei.spamnot@vaxination.ca> - 2015-06-16 21:10 -0400
                      Re: Good or bad idea Don Bruder <dakidd@sonic.net> - 2015-06-16 18:18 -0700
                        Re: Good or bad idea Your Name <YourName@YourISP.com> - 2015-06-17 13:38 +1200
                          Re: Good or bad idea John <Man@the.keyboard> - 2015-06-18 04:12 +0100
                            Re: Good or bad idea Huge <Huge@nowhere.much.invalid> - 2015-06-18 11:56 +0000
                        Re: Good or bad idea Warren Oates <warren.oates@gmail.com> - 2015-06-17 06:52 -0400
                      Re: Good or bad idea Huge <Huge@nowhere.much.invalid> - 2015-06-17 12:12 +0000
                      Re: Good or bad idea John <Man@the.keyboard> - 2015-06-18 04:03 +0100
                        Re: Good or bad idea Huge <Huge@nowhere.much.invalid> - 2015-06-18 11:56 +0000
                        Re: Good or bad idea Warren Oates <warren.oates@gmail.com> - 2015-06-18 08:20 -0400
                Re: Good or bad idea Tim Streater <timstreater@greenbee.net> - 2015-06-16 10:20 +0100
                  Re: Good or bad idea Huge <Huge@nowhere.much.invalid> - 2015-06-16 21:06 +0000
                    Re: Good or bad idea Your Name <YourName@YourISP.com> - 2015-06-17 13:12 +1200
                  Re: Good or bad idea John <Man@the.keyboard> - 2015-06-16 23:17 +0100
            Re: Good or bad idea John <Man@the.keyboard> - 2015-06-16 02:25 +0100
      Re: Good or bad idea John <Man@the.keyboard> - 2015-06-15 15:58 +0100
    Re: Good or bad idea Your Name <YourName@YourISP.com> - 2015-06-15 09:15 +1200
    Re: Good or bad idea Aldo Raine <apache@scalpem.net> - 2015-06-15 08:54 -0400

Page 2 of 4 — ← Prev page 1 [2] 3 4  Next page →

#76686

On Mon, 15 Jun 2015 21:41:25 -0400, Barry Margolin
<barmar@alum.mit.edu> wrote:

>In article <ugntnaplsuce5emke6kd1nesr3d9u90je4@4ax.com>,
> John <Man@the.keyboard> wrote:
>
>> On 14 Jun 2015 21:32:18 GMT, Jolly Roger <jollyroger@pobox.com> wrote:
>> 
>> >On 2015-06-14, Kurt Ullman <kurtullman@yahoo.com> wrote:
>> >> In article <mlkgjv$81h$2@reader2.panix.com>, billy@MIX.COM wrote:
>> >>
>> >>> Kurt Ullman <kurtullman@yahoo.com> writes:
>> >>> 
>> >>> > Okay. Better idea. Now, the question becomes can I print out a list 
>> >>> > from 
>> >>> > Keychain or do I need to do it by hand?
>> >>> 
>> >>> It's probably easier to write it all out by hand.  Use a ball point pen
>> >>> with real ink, coz some of the felt tip or similar pens will fade after
>> >>> a few years.
>> >>> 
>> >>> Billy Y..
>> >>
>> >> I have really bad handwriting so it may not be easier. ;)  In real life 
>> >> I most likely would have to go back and forth between the Keychain' s 
>> >> listing and Word to get something that could actually be read.
>> >
>> >You could probably write a script to create a CSV file (just a text file
>> >with contents that conform to CSV) that I could open with any
>> >spreadsheet program to view. The script would just loop through all keys
>> >in each key chain, and write every key as a line in the CSV file. 
>> 
>>  Bugger that, too much like work. Why not just open Keychain and take
>> a picture, then print the picture? OSX comes with Grab. Grab lets you
>> store the screen captures. Stored files can be printed. 
>
>Picture of what? Keychain Access doesn't have a screen that shows all 
>the passwords. You'd have to open each password entry, click on "Show 
>Password", enter your login password to reveal it, then take a picture 
>of that.

 Really? Sorry, I either never knew that or forgot it. I thought you
could do what Firefox does and list the userid, site and password on
one line in the main window.
 Guess I was wrong, yes? 

>
>THAT would be lots of work, probably 20-30 seconds per site.

 Very true. Did Keychain *ever* work the way I thought it did? 
 I've used it, but it was a very long time ago.
 
 See, I *do* admit it when I'm wrong. :) 
 It happens so rarely that it's a pretty strange feeling. 
                                                            J.
 

[toc] | [prev] | [next] | [standalone]

#76697

On 2015-06-16, John <Man@the.keyboard> wrote:
> On Mon, 15 Jun 2015 21:41:25 -0400, Barry Margolin
><barmar@alum.mit.edu> wrote:
>
>>In article <ugntnaplsuce5emke6kd1nesr3d9u90je4@4ax.com>,
>> John <Man@the.keyboard> wrote:
>>
>>>  Bugger that, too much like work. Why not just open Keychain and take
>>> a picture, then print the picture? OSX comes with Grab. Grab lets you
>>> store the screen captures. Stored files can be printed. 
>>
>>Picture of what? Keychain Access doesn't have a screen that shows all 
>>the passwords. You'd have to open each password entry, click on "Show 
>>Password", enter your login password to reveal it, then take a picture 
>>of that.
>
>  Really? Sorry, I either never knew that or forgot it. I thought you
> could do what Firefox does and list the userid, site and password on
> one line in the main window.
>  Guess I was wrong, yes? 
>>
>>THAT would be lots of work, probably 20-30 seconds per site.
>
>  Very true. Did Keychain *ever* work the way I thought it did? 
>  I've used it, but it was a very long time ago.
>  
>  See, I *do* admit it when I'm wrong. :) 
>  It happens so rarely that it's a pretty strange feeling. 

Why are you even commenting here if you don't know anything about it?

Exporting the keys with a script would be a relatively simple and
effective solution, IMO.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]

#76626

In article <orWdnbT4wJBZceDInZ2dnUU7-SmdnZ2d@earthlink.com>, Kurt
Ullman <kurtullman@yahoo.com> wrote:
> In article <mlkgjv$81h$2@reader2.panix.com>, billy@MIX.COM wrote:
> > Kurt Ullman <kurtullman@yahoo.com> writes:
> > > 
> > > Okay. Better idea. Now, the question becomes can I print out a list from 
> > > Keychain or do I need to do it by hand?
> > 
> > It's probably easier to write it all out by hand.  Use a ball point pen
> > with real ink, coz some of the felt tip or similar pens will fade after
> > a few years.
> 
> I have really bad handwriting so it may not be easier. ;)  In real life 
> I most likely would have to go back and forth between the Keychain' s 
> listing and Word to get something that could actually be read.

Printouts fade too, especially those from an inkjet printer.

[toc] | [prev] | [next] | [standalone]

#76640

In article <150620151311188656%YourName@YourISP.com>, Your Name
<YourName@YourISP.com> wrote:

> Printouts fade too, especially those from an inkjet printer.

only if you use shitty ink.

[toc] | [prev] | [next] | [standalone]

#76660

On Mon, 15 Jun 2015 13:11:18 +1200, Your Name <YourName@YourISP.com>
wrote:

>In article <orWdnbT4wJBZceDInZ2dnUU7-SmdnZ2d@earthlink.com>, Kurt
>Ullman <kurtullman@yahoo.com> wrote:
>> In article <mlkgjv$81h$2@reader2.panix.com>, billy@MIX.COM wrote:
>> > Kurt Ullman <kurtullman@yahoo.com> writes:
>> > > 
>> > > Okay. Better idea. Now, the question becomes can I print out a list from 
>> > > Keychain or do I need to do it by hand?
>> > 
>> > It's probably easier to write it all out by hand.  Use a ball point pen
>> > with real ink, coz some of the felt tip or similar pens will fade after
>> > a few years.
>> 
>> I have really bad handwriting so it may not be easier. ;)  In real life 
>> I most likely would have to go back and forth between the Keychain' s 
>> listing and Word to get something that could actually be read.
>
>Printouts fade too, especially those from an inkjet printer.

 Depends where you keep them. I have twenty-year-old printouts that
are legible. They were stored in random boxes. Stuff in envelopes in a
sealed, cool, fairly humid but not too humid bank vault should last
just about forever.
                      J.                   

[toc] | [prev] | [next] | [standalone]

#76620

In article <mlkgjv$81h$2@reader2.panix.com>, billy@MIX.COM wrote:

> Kurt Ullman <kurtullman@yahoo.com> writes:
> 
> > Okay. Better idea. Now, the question becomes can I print out a list from 
> > Keychain or do I need to do it by hand?
> 
> It's probably easier to write it all out by hand.  Use a ball point pen
> with real ink, coz some of the felt tip or similar pens will fade after
> a few years.
> 
> Billy Y..

These days, you can't even trust a ballpoint - Just had a note written 
in blue ballpoint (bought in a 20-pack from Staples just over 2 weeks 
ago, so pretty recent vintage) bled into an illegible blue smear on the 
paper after I got rained on hard enough to dampen the pocket the note 
was in. Time was, that same note, in that same pocket, would have gone 
through a full machine wash and dry cycle, and come out legible. 
(granted, probably raggedy after needing to be peeled apart, but legible)

-- 
Security provided by Mssrs Smith and/or Wesson. Brought to you by the letter Q

[toc] | [prev] | [next] | [standalone]

#76630

In article <mlkuk0$p8f$1@dont-email.me>, Don Bruder <dakidd@sonic.net>
wrote:
> In article <mlkgjv$81h$2@reader2.panix.com>, billy@MIX.COM wrote:
> > Kurt Ullman <kurtullman@yahoo.com> writes:
> > >
> > > Okay. Better idea. Now, the question becomes can I print out a list from 
> > > Keychain or do I need to do it by hand?
> > 
> > It's probably easier to write it all out by hand.  Use a ball point pen
> > with real ink, coz some of the felt tip or similar pens will fade after
> > a few years.
> 
> These days, you can't even trust a ballpoint - Just had a note written 
> in blue ballpoint (bought in a 20-pack from Staples just over 2 weeks 
> ago, so pretty recent vintage) bled into an illegible blue smear on the 
> paper after I got rained on hard enough to dampen the pocket the note 
> was in. Time was, that same note, in that same pocket, would have gone 
> through a full machine wash and dry cycle, and come out legible. 
> (granted, probably raggedy after needing to be peeled apart, but legible)

Yep, even ballpoint pen (or any ink) isn't infallible. It depends on
the ink, the paper, the conditions it's kept in, etc. A lot of
ballpoint pen inks fade from blue / black to a dirty brown, and then,
eventually, fade away completely.

Your best bet is to carve the passwords into a stone. Just don't leave
the stone outside in the wind, rain, snow, ... otherwise that too will
eventually become unreadable.   :-)

[toc] | [prev] | [next] | [standalone]

#76618

In article <r4mdnWY48pvVOuDInZ2dnUU7-cudnZ2d@earthlink.com>,
 Kurt Ullman <kurtullman@yahoo.com> wrote:

> Okay. Better idea. Now, the question becomes can I print out a list from 
> Keychain or do I need to do it by hand?

There doesn't seem to be a Print command in Keychain Access.

The keychain file itself is already encrypted, you don't need to encrypt 
the drive as well. But AFAIK, the only program that can read it is 
Keychain Access.

I googled and found this Apple forum thread where someone showed how to 
make an Automator workflow that extracts all your passwords into a text 
file, which you could then print.

https://discussions.apple.com/thread/6418394?start=0&tstart=0

-- 
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***

[toc] | [prev] | [next] | [standalone]

#76653

In article <barmar-79FACB.17262814062015@88-209-239-213.giganet.hu>,
 Barry Margolin <barmar@alum.mit.edu> wrote:

> I
> 
> I googled and found this Apple forum thread where someone showed how to 
> make an Automator workflow that extracts all your passwords into a text 
> file, which you could then print.
> 
> https://discussions.apple.com/thread/6418394?start=0&tstart=0

Thanks. I'll look it over.
-- 
³Statistics are like bikinis. What they reveal is suggestive,
     but what they conceal is vital.²
                       ‹ Aaron Levenstein

[toc] | [prev] | [next] | [standalone]

#76634

On 2015-06-14 16:09:44 +0000, Kurt Ullman said:

>> If you're going to use a safety-deposit box, why not print out the stuff
>> and put it with your wills which must surely be safely addressed to your
>> executors?
> 
> Okay. Better idea. Now, the question becomes can I print out a list from
> Keychain or do I need to do it by hand?

I can't imagine your passwords don't change over time. In which case 
you'll have to reburn the thumbdrive every 6 months, conceivably.  
Seems it would be easier to give her written instructions on how to 
make use of the keychain and/or 1Password or whatever so she can 
retrieve whatever she wants from your actual computers.

[toc] | [prev] | [next] | [standalone]

#76655

In article <2015061419063665838-xxx@yyyzzz>, gtr <xxx@yyy.zzz> wrote:

> On 2015-06-14 16:09:44 +0000, Kurt Ullman said:
> 
> >> If you're going to use a safety-deposit box, why not print out the stuff
> >> and put it with your wills which must surely be safely addressed to your
> >> executors?
> > 
> > Okay. Better idea. Now, the question becomes can I print out a list from
> > Keychain or do I need to do it by hand?
> 
> I can't imagine your passwords don't change over time. In which case 
> you'll have to reburn the thumbdrive every 6 months, conceivably.  
> Seems it would be easier to give her written instructions on how to 
> make use of the keychain and/or 1Password or whatever so she can 
> retrieve whatever she wants from your actual computers.

True, but I also do that with the offsite HD back ups quarterly so it 
isn't that much of an extra step.  Some of the sites I use, especially 
the financial ones, don't give the option of saving to Keychain. So I 
guess I could just write down the ones that don't and do the Keychain 
part  for the rest. 
    Getting easier all the time!
-- 
³Statistics are like bikinis. What they reveal is suggestive,
     but what they conceal is vital.²
                       ‹ Aaron Levenstein

[toc] | [prev] | [next] | [standalone]

#76673

In article <Ppidnd0SPoarTePInZ2dnUU7-Y2dnZ2d@earthlink.com>, Kurt
Ullman <kurtullman@yahoo.com> wrote:
> In article <2015061419063665838-xxx@yyyzzz>, gtr <xxx@yyy.zzz> wrote:
> > On 2015-06-14 16:09:44 +0000, Kurt Ullman said:
> > 
> > >> If you're going to use a safety-deposit box, why not print out the stuff
> > >> and put it with your wills which must surely be safely addressed to your
> > >> executors?
> > > 
> > > Okay. Better idea. Now, the question becomes can I print out a list from
> > > Keychain or do I need to do it by hand?
> > 
> > I can't imagine your passwords don't change over time. In which case 
> > you'll have to reburn the thumbdrive every 6 months, conceivably.  
> > Seems it would be easier to give her written instructions on how to 
> > make use of the keychain and/or 1Password or whatever so she can 
> > retrieve whatever she wants from your actual computers.
> 
> True, but I also do that with the offsite HD back ups quarterly so it 
> isn't that much of an extra step.  Some of the sites I use, especially 
> the financial ones, don't give the option of saving to Keychain. So I 
> guess I could just write down the ones that don't and do the Keychain 
> part  for the rest. 
>     Getting easier all the time!

Even easier ... just use "PASSWORD" and "1234" for everything.   ;-)

[toc] | [prev] | [next] | [standalone]

#76676

In article <160620150915215450%YourName@YourISP.com>,
 Your Name <YourName@YourISP.com> wrote:

> Even easier ... just use "PASSWORD" and "1234" for everything.   ;-)

Had a friend who used Mom's maiden name as his password. The phrase, not 
the old lady's moniker..
-- 
³Statistics are like bikinis. What they reveal is suggestive,
     but what they conceal is vital.²
                       ‹ Aaron Levenstein

[toc] | [prev] | [next] | [standalone]

#76685

On Mon, 15 Jun 2015 19:44:29 -0400, Kurt Ullman <kurtullman@yahoo.com>
wrote:

>In article <160620150915215450%YourName@YourISP.com>,
> Your Name <YourName@YourISP.com> wrote:
>
>> Even easier ... just use "PASSWORD" and "1234" for everything.   ;-)
>
>Had a friend who used Mom's maiden name as his password. The phrase, not 
>the old lady's moniker..

 Where I live that would actually be quite secure. "Mom" is not a real
word in our language so a dictionary attack could skip it. 
 Your Name's suggestions are possibly a little less secure. I'm sure
those are two of the first things any decent spy would ... or maybe
not. Would a spy think *anyone* could be that stupid?
 I know millions *are* and do use those very passwords but if you are
trying to hack a system would you go for those first? Or would you
assume the owner isn't a complete cretin? 
 Life as a hacker must be difficult, with all those decisions to make
... :)
                J. 

[toc] | [prev] | [next] | [standalone]

#76687

In article <1g0vnale847cmnna5jdtupuk9eah32qjt5@4ax.com>,
 John <Man@the.keyboard> wrote:

> On Mon, 15 Jun 2015 19:44:29 -0400, Kurt Ullman <kurtullman@yahoo.com>
> wrote:
> 
> >In article <160620150915215450%YourName@YourISP.com>,
> > Your Name <YourName@YourISP.com> wrote:
> >
> >> Even easier ... just use "PASSWORD" and "1234" for everything.   ;-)
> >
> >Had a friend who used Mom's maiden name as his password. The phrase, not 
> >the old lady's moniker..
> 
>  Where I live that would actually be quite secure. "Mom" is not a real
> word in our language so a dictionary attack could skip it. 
>  Your Name's suggestions are possibly a little less secure. I'm sure
> those are two of the first things any decent spy would ... or maybe
> not. Would a spy think *anyone* could be that stupid?
>  I know millions *are* and do use those very passwords but if you are
> trying to hack a system would you go for those first? Or would you
> assume the owner isn't a complete cretin? 
>  Life as a hacker must be difficult, with all those decisions to make
> ... :)
>                 J. 

I've read, in several places over the years, and in both fiction and 
non-fiction material, that the four most commonly used passwords on the 
planet, in order, are "password", "Password", "password1", and 
"Password1". Depending on who's saying it, it's claimed that between 30 
and 60 percent of all computer accounts can be popped using one of them.

Precisely how the people who've written that factoid arrived at that 
conclusion, I'm not sure (since, after all, "What's your password?" is 
*SUPPOSED* to be one of those questions that has only one correct 
answer: "I ain't tellin'!") but since it's been stated with some 
authority in so many different texts I've encountered, I tend to think 
it may well be true. (No comment on how many times it's gotten me into 
places where I wasn't really supposed to get into... I think the statute 
of limitations has expired for all of them, but one never knows for 
certain... :) )

As a side-note, I do have to mention one fellow I used to know - his 
password - passphrase, actually - was "<variable> is the only word in my 
passphrase", where "<variable>" was most often replaced with the name of 
the system he used it to log in on - So for his student account at the 
local college (which used a Pr1me-750 minicomputer) it was "Pr1me-750 is 
the only word in my passphrase", when he wanted to log into his ISP, it 
was "<ISP-name> is the only word in my passphrase", and similar. His 
theory was that since it was relatively long, regardless of what the 
"<variable>" was, it was probably pretty secure, and he only had to 
actually remember where he was trying to log in to get it right. He also 
seemed to think it was a clever way to screw with anyone who might want 
to try "rubber hose cryptanalysis" on him, since he'd be able to answer 
truthfully, but chances were high that an interrogator would "miss" it 
because he'd only be trying only the "<variable>" part. (I thought that 
unlikely, but... <shrug>)

-- 
Security provided by Mssrs Smith and/or Wesson. Brought to you by the letter Q

[toc] | [prev] | [next] | [standalone]

#76689

On Mon, 15 Jun 2015 20:06:40 -0700, Don Bruder <dakidd@sonic.net>
wrote:

>In article <1g0vnale847cmnna5jdtupuk9eah32qjt5@4ax.com>,
> John <Man@the.keyboard> wrote:
>
>> On Mon, 15 Jun 2015 19:44:29 -0400, Kurt Ullman <kurtullman@yahoo.com>
>> wrote:
>> 
>> >In article <160620150915215450%YourName@YourISP.com>,
>> > Your Name <YourName@YourISP.com> wrote:
>> >
>> >> Even easier ... just use "PASSWORD" and "1234" for everything.   ;-)
>> >
>> >Had a friend who used Mom's maiden name as his password. The phrase, not 
>> >the old lady's moniker..
>> 
>>  Where I live that would actually be quite secure. "Mom" is not a real
>> word in our language so a dictionary attack could skip it. 
>>  Your Name's suggestions are possibly a little less secure. I'm sure
>> those are two of the first things any decent spy would ... or maybe
>> not. Would a spy think *anyone* could be that stupid?
>>  I know millions *are* and do use those very passwords but if you are
>> trying to hack a system would you go for those first? Or would you
>> assume the owner isn't a complete cretin? 
>>  Life as a hacker must be difficult, with all those decisions to make
>> ... :)
>>                 J. 
>
>I've read, in several places over the years, and in both fiction and 
>non-fiction material, that the four most commonly used passwords on the 
>planet, in order, are "password", "Password", "password1", and 
>"Password1". Depending on who's saying it, it's claimed that between 30 
>and 60 percent of all computer accounts can be popped using one of them.
>
>Precisely how the people who've written that factoid arrived at that 
>conclusion, I'm not sure (since, after all, "What's your password?" is 
>*SUPPOSED* to be one of those questions that has only one correct 
>answer: "I ain't tellin'!") but since it's been stated with some 
>authority in so many different texts I've encountered, I tend to think 
>it may well be true. (No comment on how many times it's gotten me into 
>places where I wasn't really supposed to get into... I think the statute 
>of limitations has expired for all of them, but one never knows for 
>certain... :) )

 Some databases of logins to websites have been hacked. A few of those
hacks have been publicised on naughty websites. PC and Mac, maybe even
Unix magazines have done "Aren't these users moronic?" stories about
the prevalence of certain passwords.
 "123456" is also a favourite.
 

>
<<snipped>>
                  J. 

[toc] | [prev] | [next] | [standalone]

#76694

In article <mlo3pi$cfc$1@dont-email.me>, Don Bruder <dakidd@sonic.net> 
wrote:

> I've read, in several places over the years, and in both fiction and 
> non-fiction material, that the four most commonly used passwords on the 
> planet, in order, are "password", "Password", "password1", and 
> "Password1". Depending on who's saying it, it's claimed that between 30 
> and 60 percent of all computer accounts can be popped using one of them.
> 
> Precisely how the people who've written that factoid arrived at that 
> conclusion, I'm not sure (since, after all, "What's your password?" is 
> *SUPPOSED* to be one of those questions that has only one correct 
> answer: "I ain't tellin'!") but since it's been stated with some 
> authority in so many different texts I've encountered, I tend to think 
> it may well be true. (No comment on how many times it's gotten me into 
> places where I wasn't really supposed to get into... I think the statute 
> of limitations has expired for all of them, but one never knows for 
> certain... :) )

All you have to do is get a copy of the password database for a bunch of 
sites and try each of those passwords, and see how often they work.

I remember when I got my first ATM card (1979), I thought I was clever 
making my PIN/Password a misspelled word -- I swapped two characters of 
a word. But what I didn't realize was that on the telephone-style 
keypad, these characters are on the same button, so I didn't actually 
change anything.

-- 
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***

[toc] | [prev] | [next] | [standalone]

#76700

In article <barmar-F263B7.11002816062015@88-209-239-213.giganet.hu>,
 Barry Margolin <barmar@alum.mit.edu> wrote:

> I remember when I got my first ATM card (1979), I thought I was clever 
> making my PIN/Password a misspelled word -- I swapped two characters of 
> a word. But what I didn't realize was that on the telephone-style 
> keypad, these characters are on the same button, so I didn't actually 
> change anything.

I love it. It's worthy of my thought-processes. I once set up a stereo 
system for a party ("get Warren to do it, he knows that shit") and 
plugged the amplifier into itself "oh, there's a spare socket!"
-- 
Where's the Vangelis music?
Pris' tongue is sticking out in in the wide shot after Batty has kissed her.
They have put back more tits into the Zhora dressing  room scene.
  -- notes for Blade Runner

[toc] | [prev] | [next] | [standalone]

#76709

On 2015-06-15 23:06, Don Bruder wrote:
> In article <1g0vnale847cmnna5jdtupuk9eah32qjt5@4ax.com>,
>   John <Man@the.keyboard> wrote:
>
>> On Mon, 15 Jun 2015 19:44:29 -0400, Kurt Ullman <kurtullman@yahoo.com>
>> wrote:
>>
>>> In article <160620150915215450%YourName@YourISP.com>,
>>> Your Name <YourName@YourISP.com> wrote:
>>>
>>>> Even easier ... just use "PASSWORD" and "1234" for everything.   ;-)
>>>
>>> Had a friend who used Mom's maiden name as his password. The phrase, not
>>> the old lady's moniker..
>>
>>   Where I live that would actually be quite secure. "Mom" is not a real
>> word in our language so a dictionary attack could skip it.
>>   Your Name's suggestions are possibly a little less secure. I'm sure
>> those are two of the first things any decent spy would ... or maybe
>> not. Would a spy think *anyone* could be that stupid?
>>   I know millions *are* and do use those very passwords but if you are
>> trying to hack a system would you go for those first? Or would you
>> assume the owner isn't a complete cretin?
>>   Life as a hacker must be difficult, with all those decisions to make
>> ... :)
>>                  J.
>
> I've read, in several places over the years, and in both fiction and
> non-fiction material, that the four most commonly used passwords on the
> planet, in order, are "password", "Password", "password1", and
> "Password1".

http://gizmodo.com/the-25-most-popular-passwords-of-2014-were-all-doomed-1680596951

[toc] | [prev] | [next] | [standalone]

#76599

In article <coCdncR674qRCuDInZ2dnUU7-XudnZ2d@earthlink.com>,
 Kurt Ullman <kurtullman@yahoo.com> wrote:

> I was reading at article last week outlining all of the problems a widow 
> had when her husband died getting into his various accounts because of 
> not knowing the usernames, passwords,and security questions. I am 
> thinking about putting this information (for both of us) on encrypted 
> thumb drives and putting them in the safety deposit boxes with the 
> wills. I would like to d/l the usernames/passwords from Keychain access. 
> I can then fill in the blanks of the few accounts that aren't on 
> Keychain and work out the security questions. 
>  So, is this a good idea or dumb idea? Needed or unneeded? If good idea 
> what file or plist or whatever do I need to d/l?

What you write down on a piece of paper cannot be hacked even when taped to side 
of the computer.

-- 
:-<> Siri Seal of Disavowal #000-001. Disavowed. Denied. Deleted.
'I desire mercy, not sacrifice.'
When is a Kenyan not a Kenyan? When he's a Canadian.
That's People's Commissioner Siri Cruz now. Punch!

[toc] | [prev] | [next] | [standalone]

Page 2 of 4 — ← Prev page 1 [2] 3 4  Next page →

Back to top | Article view | comp.sys.mac.system

csiph-web