{"id":2102,"date":"2010-10-26T01:00:47","date_gmt":"2010-10-26T00:00:47","guid":{"rendered":"http:\/\/blog.intego.com\/?p=2102"},"modified":"2015-01-13T08:05:03","modified_gmt":"2015-01-13T16:05:03","slug":"are-any-passwords-secure-any-more","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/are-any-passwords-secure-any-more\/","title":{"rendered":"Are Any Passwords Secure Any More?"},"content":{"rendered":"

As computer power has increased, the tools that allow hackers to infiltrate computers have gotten stronger as well. It’s widely recommended that you don’t use common words for your passwords – don’t use “password,” the name of your pet, or you child’s first name, the latter two being easy to discover. Recommendations generally tell you to use a word that’s not in a dictionary, to mix letters, numbers and punctuation, and to make a password long enough.<\/p>\n

But are these passwords secure? And how long is long enough? A Swiss company, Objectif S\u00e9curit\u00e9, has developed a system for cracking passwords<\/a> based on tables that are stored on SSD drives. Why SSD? Well, it turns out<\/a> that using SSD drives is much faster than traditional hard drives, allowing more than 300 billion tests per second.<\/p>\n

Here’s how it works. Your password is not stored on your computer, but a “hash” of it is. This is a string of letters and numbers that is created by applying mathematical functions to your password. Since multiple passwords could have the same hash, there’s no way of working back from the hash to the password, but software can test billions of possible combinations to see if they do, indeed, produce the hash of your password.<\/p>\n

In a test, it was found that this password cracking tool could find complex 14-character passwords used with Windows XP in less than ten seconds. Passwords this long are considered to be very strong by Mac OS X (even ten-character random passwords are considered strong).<\/p>\n


\n\"\"<\/center>But this cracking technology suggests that anyone with such a tool, and the ability to infiltrate a computer and obtain password hashes, would be able to hack accounts as fast as characters do in movies. Granted, one still needs to access those hashes, so a hacker either needs physical access to a computer, or needs to break into it and obtain the necessary privileges to get different users’ hashes. But if, for example, your laptop is lost or stolen, a thief or hacker will be able to easily get this information.<\/p>\n","protected":false},"excerpt":{"rendered":"

As computer power has increased, the tools that allow hackers to infiltrate computers have gotten stronger as well. It’s widely recommended that you don’t use common words for your passwords – don’t use “password,” the name of your pet, or you child’s first name, the latter two being easy to discover. Recommendations generally tell you […]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[13],"tags":[353,96],"yoast_head":"\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\t\n\t\n\t\n