This week's post looks at what makes a weak password and the actions Interserv has taken to ensure we keep our password game strong.
#cybersecurity #cybersecurityawareness #dataprotection #password
https://www.interserv.com.au/index.php/blog/upping-your-password-security-game
93D8!Pj8Xx*!nxx#*H4R
PresoakName6Hedging
A passkey is a secure, easy-to-use replacement for passwords. It uses your device's built-in security (Face ID, fingerprint, PIN, etc.) to log you into a website or service, without requiring you to remember or type anything.
#passkey #password #security
https://www.techspot.com/article/2971-passkeys-explainer/
bHAv)P)cQ+%pAZh*n@2}
ObsessedUnbalance5Duress
This dumb password rule is from State Bank of India (Foreign Travel Card).
State Bank of India is the largest government operated bank in India.
They offer "travel" prepaid cards for foreign currencies, this is for
their portal for the prepaid card users to manage their account.
Your password must:
- Be between 8 and 9 characters long
- Contain at least 1 lowercase c...
https://dumbpasswordrules.com/sites/state-bank-of-india-foreign-travel-card/
Unmasking a slow and steady password spray attack
https://petrasecurity.substack.com/p/unmasking-a-slow-and-steady-password
]UTLDx~}+Dt#+do+HYl1
ChillUndermost3Justifier
z4$2E6!H04O.T]2N*Ml5
BarrierStage5Banknote
This dumb password rule is from Chase Bank.
* Can't use any special characters except ! # $ % + / = @ ~
* Max length restriction (32 characters).
* No runs of identical characters ("aaa") or sequential characters ("abc").
* Password check is case-insensitive
.J6jo=shHjWF@U'fOt3h
DingySpookily5Gradient
C=ZQEfz;ip>kr)\h7KQ,
ImproviseOverpower5Senorita
This dumb password rule is from Bendigo Bank.
**Exactly** eight characters.
A\&z';@ft7'I:l"xr\WC
SilverNatural5Profane
j,8u5Tq`w3G:OZ$+/Y**
ProperlySandpaper1Resistant
This dumb password rule is from USAA Bank.
Password cannot be longer than 12 characters but they don't tell you that until after you try a new password. To make up for this fact they've added dubious additional security features on top of this weak foundation.
o^P&sPZ-"T>Kzf9DFf4>
TrustfulOverdraft1Mosaic
I'm considering using a password manager. I run a minimal archlinux-based system. I don't care about synchronizing with any other machines, just about making an encrypted backup of the password bank in a file I can put in an exterman HD and not worry about. Any suggestions?
Even more importantly, what to look for and what to avoid when evaluating alternatives? (My scepticism against software is what kept me away from this type of program for the last decade and a half...)
M}M{LBYZ_.,IR{z3Gnzo
UpwardFacing3Chive
