*Password Security*

[Kyle]

As we start getting closer to the time when the frogs are gone from test center, and XP, crafting, and normal progression are on the horizon, it is important for us to address security. After conversations with a number of users, we want to make sure that people in the community have the knowledge of how to keep their accounts safe, not only their SWGEmu passwords, but passwords to everything they use. I am going to share a few links that I would advise everyone to glance at regarding how to make a secure password. I have been thinking about this issue for some time now, and have actually made it part of my senior project for college. If you would take a second to fill out a short survey designed to just make you think about your own passwords, you might be surprised at how insecure your password actually is. After the short 30 second survey, I have linked to 3 sites that really touch on the major points of the "how" in making a secure password. Click Here (http://www.ocdsoft.com/passwordsurvey.php)

P.S. Not only will this help you out with passwords, but it will greatly help my data collection for my school project!

[Seaseme]

done and done.

[Ekaika]

done +1

[corbaer]

Did the survey. Hope it helps the senior project.

[Sadeous]

Did it good luck on your project Kyle bring home the A++ :D

[Leodextrin]

Good I could use this, my old password used to be lolzcatz1337roflcoptersauce (not really, but you get the point) strangely enough somebody figured it out.

Get that A++

[Belgarion]

Done.

[krachera]

Done, iwould also like to provide a link to a site that makes "perfect" passwords GRC passwords (https://www.grc.com/passwords.htm)

A tip when building a password is to make something that makes sence to you and no one else, sop don't make passwords that contain personal info.

[xavia]

All set. Good luck with your project!

[LiquidObsidian]

best password around : 10 chars, mixing Upper/Lowercase, numbers AND ponctuation and specially NOT a L33teD word (don't trust me ? take a look @ the way john the ripper (a "popular" password cracker) generates the passes from a dictionnary...)

my 2 cents

[bongandbeer]

interesting, hope i helped the study, good luck with that !! =)

[tamer]

thanks for the information, good luck on your project
in honor of you kyle i'll send extra cookies to my kids dorm hehe

[KroniK]

Took the quiz hope it helps.

[StormZ]

Anything to help,

done

[nevoc]

done m8, thnxz for the links and g/l in college

[Vrej]

Good luck in your senior project for college. I took the survery as well.


For my important passwords I use a random set of letters, a capital and a number.

But for my wireless password, since I don't have to remember it, I go all out. 63 random printable ASCII characters is my game and, from what I understand, most WPA crackers are dictionary/reference based -- suffice it to say it has never been compromised.

[Isskiss Osskis]

Good stuff to distribute to the masses.

Quiz is complete. Hope it helps your research, Kyle!

I like to use Keepass. It comes as a standalone program, as well as portable so that it can be run with the portable apps suite. It has pretty good encryption for the database of your passwords as well as a built in password generator available to make all your passwords.

It can be found here (http://portableapps.com/apps/utilities/keepass_portable).

[SoapSud]

Survey complete Kyle, good luck on your final year project :)

[Deniska]

GL with your project. Today any popular hash algorythm ( md5, sha1 etc ) can be bruteforced really easy. The only way to keep your password safe ( even if your passhash was stolen from web-service DB, for example ) - combination of lower+upper case alphas, numerics and special characters(if they are allowed by service) with string length more then 10 chars (password length is MORE important than characters variations).
For example, using utility writen with nCUDA on nVIDIA GeForce 9600GT you can brute md5 hash with speed ~200 000 000 combinations/sec. On high-end graphic cards ( or if they are in SLI ) speed is higher than 400-500mln combinations/sec (:

EDIT: And another way - using so called 'salt', so thief must steal not only your passhash, but salt 'key' too.

[vanster]

hope i scored well, or i'm screwed...gl with the course !

[hinch]

done your survey but none of your examples are complex enough tbh

my standard password is an md5 hash of an already complex password used it for years (about 10) since i memorised it one day at work for some odd reason and its just stuck ever since

[Max]

GL with your project. Today any popular hash algorythm ( md5, sha1 etc ) can be bruteforced really easy. The only way to keep your password safe ( even if your passhash was stolen from web-service DB, for example ) - combination of lower+upper case alphas, numerics and special characters(if they are allowed by service) with string length more then 10 chars (password length is MORE important than characters variations).
For example, using utility writen with nCUDA on nVIDIA GeForce 9600GT you can brute md5 hash with speed ~200 000 000 combinations/sec. On high-end graphic cards ( or if they are in SLI ) speed is higher than 400-500mln combinations/sec (:

EDIT: And another way - using so called 'salt', so thief must steal not only your passhash, but salt 'key' too.
You'll be happy to know that both our TC and Forum databases use a number of hash combinations on top of salt.

[Saromus]

Uli encodes his passwords in Hex :p nd ASCII

[Relentless]

Done x2.

[zaragoth]

Done... hope it helps.

[Uli]

Uli encodes his passwords in Hex :p nd ASCII

Password ---> 50617373776f7264 ---> 01010000011000010111001101110011011101110110111101 11001001100100

[klendithu1]

Could post the results to the survey or what you find in your research. I am curious.

Also, done + 1

[Tyranis]

Filled in the list for your school project mate :D good luck with it ^^

[waofy]

Done +1

I know how tedious data collection for projects can be :rolleyes:

[atomicburn]

Cool survey, thanks for the links. My password is secure now. :)

[Jay]

Good looking out for everybody. Some useful links in there.. hopefully everyone takes this advice to heart.

Hope you get a good grade on your project!