Thursday, October 3, 2019

9 blunders we make while selecting passwords

Passwords, passwords or passwords. We think they're guarding us, but it's an illusion, according to Frank Abagnale, a former fraudster and today an information security consultant, who wants to replace the password system with more modern and better security solutions.

"We think passwords keep us safe, but it's just an illusion. Passwords do not protect us from hackers, nor do they protect the privacy of our online data, ”claims Frank Abagnale, an information security consultant, in a text published on CNBC.

Frank Abagnale is a former professional fraudster and author of one of the best-selling autobiographies, " Catch Me If You Can, " by which Steven Spielberg made a movie of the same name with Leonard DiCaprio in the role of Abagnale in 2002. Today he is one of the world's leading authorities in terms of fraud, forgery and information security.

He has enjoyed the trust of the FBI for more than four decades - he teaches at their academy and lectures on the ground. His latest book, " Fake Me If You Can, " discusses strategies to combat modern fraud .

"The story I told in my biography published in the 1980s interested the public in identity theft, but also in one of the main problems when it comes to fraud, which are passwords. My new book 'Cheat Me If You Can' is about that, "Abagnale writes.

Passwords are the weakest security link


The technology that surrounds us today - smartphones, online banking and commerce, Google, smart TVs - has emerged in the last twenty or so years. Usernames and passwords (passwords or passwords, as you please), the most widespread security mechanisms in use today, were invented in 1963 , more than half a century ago.

The inventor of the password for the computer, Fernando Corbató (who passed away this year at the age of 93), said "passwords with the advent of the World Wide Web have become a nightmare" for users.


Michael Chertoff , who served as secretary of state at the U.S. Department of Homeland Security from 2005 to 2009, endorsed Corbato's views in 2016. "In-depth investigations into the biggest frauds reveal that what they all have in common is that a password was the key to breaking into the security system ," Chertoff told CNBC.

"The reason is simple," he explained. " Password is by far the weakest link in cyber security . If the government would declare the replacement of passwords with more modern security solutions a national priority, it would encourage companies and other institutions to adopt better quality solutions, and data leaks due to password breaks would become a thing of the past. ”


Common password errors


Abagnale supports Chertoff and lists some of the biggest mistakes we make with passwords.

1. Change your passwords too often
Frequent password changes are counterproductive because people tend to change one password to another, which they also often use. Often changed passwords are easy to forget and just as easy to steal as rarely changed passwords.

2. You choose too complicated passwords
Keep your passwords simple but smart . Studies examining complex password requirements - for example, those that oblige you to use symbols and uppercase and lowercase letters - show that such requests result in less secure passwords.

3. You do not check the selected password
The National Institute of Standards and Technology recommends that you compare your selected password with a list of commonly used or known compromised passwords. Enzoic.com and Passwordrandom.com are two examples of websites that offer password verification tools.

4. Recycle the same passwords
Reusing the same password on multiple websites is especially dangerous for emails, bank accounts, and social media accounts . Even if you haven't used them in years, once stolen, they can be used to access different websites.

5. Use (pre) available data
Do not use the following information for passwords or security questions: dear or pet names, maiden names, birthdays, birthdays, wedding dates, or any other similar information available on the Internet.

6. Use the option to remember the password for your computer
Never, absolutely, never apply the "save" or "remember me" option on a public computer. The following user could easily access your account.

7. You use character strings that are easy to hack
Do not use a string of characters such as "123456", "qwerty" or "password" for the password. Many hackers still use the "guesswork" strategy to enter. Think of something more complex, yet memorable and personal for you. For example, "70YrS @ n% styll% LUVN ^ life!" Which could mean "70 years old and I still love life!"

8. Do not password protect your mobile device
A study by Kaspersky found that 18 percent of smartphone users use almost no security, even password. When setting a password on a smart device, it would be wise to avoid combinations such as "1234," 0000, "2580" (top to bottom) or "5683" (which, if the letters are used instead of numbers, would indicate 'love' ', that is, love in English).

9. You have stored a password list on your computer.
Saving passwords is fine, provided they are not saved on your computer or smartphone. However, if you do so and your computer is infected with malware, you are bound to fail. Writing in pencil on paper, stored in a safe place is a better choice. Especially if it consists of hints instead of real passwords.


The cost of not doing


Changes take time, but also willpower. Abagnale calls for action immediately.

"We must act now. When cybercriminals break into a database with usernames and passwords, they take over your identity, ”he warns.

With account identities and credentials, they have merchandise that is very well marketable in the online black market. They can be easily converted into cash or cryptocurrencies. The money earned is mostly used for illegal purposes, often much worse than stealing money, warns Abagnale.

"Let's not let the bad guys win," he added, quoting at the end of the Anglo-Irish statesman and philosopher Edmund Burke: "The only thing necessary for evil to win is for good people to do nothing . "

Read more

1 comment:

  1. Why do scholars want online assignment helper online assignment helper?
    A completed task or solution help not only helps a student in achieving a higher academic score but scholars have a chance of sympathetic the subject better. This also increases their knowledge and enhances their writing skills and abilities. We offer experts with our best online assignment helper for all subjects at an affordable price.
    https://www.vinkomedia.com/how-does-homework-put-pressure-on-students//

    ReplyDelete