| Pages: 1 [2] :: one page |
| Author |
Thread Statistics | Show CCP posts - 0 post(s) |
Gregory Robson
   |
Posted - 2006.01.29 12:51:00 -
[31]
 Originally by: Horatio Starkiller
Edited by: Horatio Starkiller on 28/01/2006 19:38:49
I find this to be rather useful. I hope many of you consider using it to test your own passwords
Isn't a great idea to submit your passwords over unecrypted connection to some arbitrary website before using them ?
|
Yorrick Stix
|
Posted - 2006.01.29 19:45:00 -
[32]
Originally by: Gregory Robson
Isn't a great idea to submit your passwords over unecrypted connection to some arbitrary website before using them ?
A password without a username is as useless as an username without a password. :)
But that script looks like crap to me. I have entered a simple word which was improbable to be in it's dictionary and got 50% "strong" like 90% out there. It probably "rewards" the password by canse sensitive and numbers and such. Something you can do with common sense, you don't actually need a script for that.
It is my belief that most of the accounts that were hacked were hacked using the player's weak points - trojans and eve related scripts and apps that sniff out your eve login information or even mouth to mouth info (slipped username and bruteforce). If my account would be hacked a second time in the same day i changed my password my first reaction would be to disconect the machine and do a complete sweep on it with severals top antivir engines.
If any eve server would be hacked and a list of usernames and passwords would be to slip - no mather how thin - i think the result would be several times more devastating that what we observed so far. I pretty much doubt that.
|
Dial
|
Posted - 2006.01.30 01:02:00 -
[33]
Yea! back in at last 
Dial
|
Kittamaru
|
Posted - 2006.01.30 01:33:00 -
[34]
You want a good password?
ABC123βΊσ
There ya go
AlphaNumericSymbolic
ABC
123
ALT +numpad 159, 789, 741
I use an AlphaNumericSymbolic one... tad difficult to remember off the bat, but damn near un*****able:) Though... mine does add Kanji into the mix
|
Staranc
|
Posted - 2006.01.30 19:19:00 -
[35]
Completely worthless thread. Hacking, lol... do you even know what hacking means? Oh! yesssss... I've lost my account, can't gain access... some guy asked for me to give him my dogs name, wait a sec... that's my password!!! lmao!!!!
-----------------------------------------------
|
Havoc GunStar
|
Posted - 2006.01.31 00:05:00 -
[36]
Edited by: Havoc GunStar on 31/01/2006 00:06:49
Why would you tell someone how you form your password? Seriously. How foolish is that?
"My password is UBER, it's three numbers, three letters and three symbols".
Assuming you told the truth, you just made a brute force attack that much easier. Don't share your account name, don't share your methodology in choosing a password, don't share ANYTHING.
And don't use a stupid website that offers to evaluate your password for you. You don't know who the heck runs that site. Sure, it's not tied back to YOUR account and might not be the exact spelling of your password, but if 90% of the people that use that test use the same methodology, like 3 letters, 3 numbers and 3 symbols, you've just given the people running that site a useful piece of information that can be used to exploit the average person's online password selection habits.
Remember, paranoids have enemies too. Share NOTHING.
|
Marcus Right
|
Posted - 2006.01.31 17:09:00 -
[37]
Originally by: Staranc
Completely worthless thread. Hacking, lol... do you even know what hacking means? Oh! yesssss... I've lost my account, can't gain access... some guy asked for me to give him my dogs name, wait a sec... that's my password!!! lmao!!!!
This thread was made in hopes that CCP would respond to it. I don't know why on Earth I expected that to happen. CCP seems to never respond to anything on these forums. At least not on the forums themselves.
If you read the first thread, it is asking CCP to put in extra measures to prevent these hacking attacks. Also, some intel to us players that would show us they are doing something about them besides just returning lots items and ISK to those who have been hacked.
You will never be able to prevent idiots from having their accounts screwed up by other idiots. Friends who give passwords to friends. People who give their passwords out on the net or over the phone... or to some third party software. Heck, people who recommend others use some third party software on the forums could be the very same people or person who wrote it to steel passwords. Websites that want your passwords to other sights or games can never be trusted!
You can not protect the idiots from themselves, though you can try to educated them.
What many of you people don't seem to understand is: I'm asking CCP what it's doing to protect the non-idiots. How is it that key accounts are being attacked? Accounts that I know are not young kidea, but mature adults and therefore a lot less prone to doing foolish stuff such as giving out their password information. (Less prone does not mean completely wont. It means LESS prone.) However, by shear numbers I don't see how it is possible that there are that many dumb adults that also happen to lead major corperations or have key parts in them. Also have been playing Eve for a very long time. People with the skills to build carriers, or people with 100's of millions of ISK. Aside from the one guy who happened to be broke when he was hacked. But how old is his account?
And at any rate. I feel that 1500 times is not a low enough number to prevent an attack. 1500 attempts may not be enough to ***** any password worth it's salt, however 1500 in a day is humanly impratical. 1500 times in a day is an obvious sign of a Brut Force attack. I believe that they could detect it alot sooner. Such as maybe the 100th time? Even teh 15th or 20th time in under an hour? 20 attempts an hour seems very reasonable to me for a point to which to stop attempts to log into an account.
Why is 1500 more reasonable? 20 nips it in the rump! 15 nips it!
- Right -
www.eve-search.com |
Lividicus
|
Posted - 2006.01.31 23:48:00 -
[38]
Just a small note:
99 times out of 100 when this happens (it happens in every mmog) its people downloading mods or other programs with trojans or other "terminate and stay resident" scripts that keylog your username and password.
Dont download mods or helpful little programs, and you wont get "hacked".
|
| |
|
| Pages: 1 [2] :: one page |
| First page | Previous page | Next page | Last page |