flemingd, on 07 June 2012 - 05:58 AM, said:
Now for the fun part - a website called lastpass.com has created a tool that checks a password you enter against the list that was published and lets you know if it's on there. It doesn't tell you the email address(es) the password works with, and if you enter your real password they can't necessarily correlate that to yours.
I was playing around with it to see how silly/stupid people are, entering passwords off the top of my head. Among the positive matches I got:
goddammit
neveragain
helloworld
gohome
yousuck
linkedin (seriously, someone used this as a password!)
SNICKERSit
CHIPS AHOY!hole
https://lastpass.com/linkedin/ if you wanna have your own fun or check your password.
None of the passwords I use in various places were found in there. But then virtually every password I use has a mix of letters and numbers, and isn't simple words/phrases. I do re-use some in multiple places (say football web sites might all have the same one).
SayItAintSoJoe, on 07 June 2012 - 07:30 AM, said:
More websites needs to start offering a two step authentication process where after you login with your username and password a 6 digit code is sent to your text phone that you'll also need to enter before you gain access. The code expires after 10 minutes if not used. B of A has this but for some odd reason they don't really advertise this feature much. You can set it up to always require the additional code when logging in or only require the code when logging in from an unrecognized computer/device.
That's a cool feature as long as it is optional. I for one would have having to do that every time I log into a site (even for my banking).
matt770, on 07 June 2012 - 07:43 AM, said:
I think its like Facebook for professionals.
1
Just a matter of time until FB is a feather in somebody's black hat. Targets only get bigger, and LinkedIn is just the next one up the proverbial food chain. A HUGH treasure trove of info in all these "social" sites. Makes me nervous enough signing in @ the Huddle, since the sign-ins are all on unencrypted pages.
