Adding to Cart…
Licensing Agreement | Terms of Service | Privacy Policy | EULA
© 2025 Daz Productions Inc. All Rights Reserved.You currently have no notifications.
Licensing Agreement | Terms of Service | Privacy Policy | EULA
© 2025 Daz Productions Inc. All Rights Reserved.
Comments
Yeah, I got an e-mail ransom demand a few weeks ago. No proof of actual infection or stolen information, just statement that they'd hacked me and demanded $1000 or they'd tell my boss and friends the kinds of websites I'd been visiting.
(Ooh, shame on me!
) So, it was probably just a bluff but I went ahead and changed all my major passwords anyway (they're all different everywhere). But I have had difficulty getting into my telephone company website lately, coincidently right after they redesigned their website suggesting there might be problems. I just haven't persisted or called them on the phone yet. I will soon.
The basic truth is that the internet was designed and built for communication not transactions.
Period.
All the 'safeguards' created are just bandaids. The underlying---underneath the web---need to be changed or replaced. Good news is many minds are currently working on ways to do just that.
It will come---someday. Maybe.
With all that we do successfully online in this day and age, I kind of doubt that we'll redesign it.
Fascinating. I have a 'generic' password I've been using for years for sites that require a logon but no financial data. At least 3 of these sites have suffered data breaches of one kind or another. But good ol' generic password? Not found! The handful I use for actual financial transactions are also safe, and the password I use here - has been used 852 times. Probably should change it . . .
..PM'd response.
Change it, Chohole! CHANGE IT!! CHANGE IT!!!
I kinda agree with that... humans never change/fix anything unless it’s fully engulfed in flames or about to sink... actually both and change “about to sink” to “actively engaged in sinking”.
Like the titanic kind of sinking?
I never change my password, it is the same for everythihg, makes it more convenient - so yeah my password is easy to remember too it is simply DOG as easy as all my PIN #'s which is 1234.
not really of course LOL
What I do is have a core password I always use, then attach site specific stuff.
So lets say it was Armoir3.
My Daz password is then Armoir3daz
google would be Armoir3g
and so on.
Yeah, if hackers are studying and correlating two or more sets of passwords they’ll figure it out, but at that point I’m boned unless I’m a security expert anywY.
I opften wonder, when reading threads like this, if people to whom English is a 2nd language make thier passwords in English or their first language. And if the latter do they get hacked as easily as English and American English passwords.
I make mine in Gibberish.
I don't use words at all. I just use combinations of letters, numbers, and symbols.
...all I have to do is try and text on my phone and I can come up with great passwords and codes. Surprised the CIA or MI-5 haven't tried to recruit me yet.
There are password generators but I have found them impractical because some sites don't allow "paste" in the password field. Who wants to type out: hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY every time you login to one of those sites? So I tend to use word combinations with some letters transposed for symbols and numbers and a mixture of upper and lower case.
Yeah, and just try typing in hhuipiWT^F@@))uyf∞£lluiuvGIbD195kh09kfY on an input screen where you have to keep switching back and forth between letters/uppers/numbers/specials on different input screens where you have to use arrow keys to make selections. Ghaaaa...
Not one of those 143 I'm apparently registered at prevented a paste. If they did I'd drop them a mail and educate them about how such functionality works against security exactly because of the reaction you had.
Back in the day, as a sysadmin, I did set the system requirements for passwords to by 6 character minimum, with at least one digit and one special character. I didn't have an option for both upper and lower case, but I did try the built-in dictionary check - and gave up on it after arguing about the implementation with IBM. As implemented, reallywas in the dictionary and not valid. really1, real1y, and 1really were NOT in the dictionary and perfectly valid.
I've never been a fan of 'change the password every n days' - this just leads to bad passwords or post-it notes with passwords on them. And as near as I can tell, the theory is that you'll have changed your password between the time the site was hacked and the bad guys tried to use your credentials.
I go to several sites that won't allow a paste in the password field,
i clicked on that and it opened compose in gmail for me to send it a letter
That is due to its at sign which there are two of them in that fake password. It is not a real email address but probably not a real password. I hope it is not one.
I use LastPass which automatically pastes my credentials and several sites don't allow it.
So send them a mail and let them know about their backwards security.
I use LastPass too. I recommend LastPass.
I posted this in a separate thread, but just wanted to make sure people saw this. There is a huge Indian hacker group going after PayPal users and if you call PayPal, they hijack your number and call back pretending to be PayPal!
What I wrote:
There are major hackers out there who can get into your account and disable your password (although you can reset it.) I called PayPal originally, for another issue entirely and the phone call was cut off and I was immediately called back from an Indian man claiming to be from PayPal. He knew my email, home address, PayPal balance, everything. He said my account was red flagged, put me on hold, then claimed I had been hacked in small amounts over the last 3 months adding up to over $645! I asked why I didn’t see this reflected in my account? He said they were micro transactions only visible on his side, which already seemed suspicious.He sent me a verification code which I typed back to him. Big mistake.Then I tried to log into my PayPal account, but couldn’t. I quickly changed my password while still on the phone with the scammer trying to convince me I had to put money in a Google Play Card to expedite resolving the hacker issue. By then I realized HE was the hacker and heard a bunch of other Indians in the background talking about Google Play cards. I quickly called PayPal again, got an American, told the whole story and they said they were aware of the situation and trying to stop it. My account had in fact been hacked into by somone somewhere in India. Now I have to wipe my phone because I don’t know what that code did... Concerned about all my devices actually. So be very careful with your PayPal accounts and change your password often! Do not accept any phone calls claiming they are PayPal, even if you just called PayPal. They are hijacking phone numbers. End of public service announcement...
How many ways can a password be done? YummyCake or yummycake or Yummycake or yummyCake or NotInMyDietCake
I ditched LastPass ages ago as it was purchased by LogMeIn, the same people who run the Hamachi VPN client, which has a history of getting breached.
I switched to Enpass. It's a local password manager with autofill/pw generation capabilities and I sync the database between my devices.
The safest though I've heard is another offline one, which is also open source, which allows it's code to be scrutinized. It's called KeePass.
Actually, the safest method is making up your own passwords from random digits, and writing them down on a piece of paper. I know, what a pain to actually type in characters! Archaic, I understand, but anything you use software for, and then sync between devices is vulnerable unless it's generating completely random characters..
From what I've read, the random characters isn't really the problem, it's the length of the password. The longer it is, the longer it takes to crack. Once you're in the 30-35+ character range I believe, you're looking at years upon years of cracking. You could use full words, but the trick is to make each word have nothing to do with each other. For instance, donkeycrackerswimmingtriangle is better than iliketoeatapplepie, but you still want to throw in random capitals, numbers, and symbols.
I haven't had any problems with pasting either, and I'm on a lot of sites too.
I also use Zemana Antilogger to avoid anyone picking up anything I type.