# Need a Strong Password? **URL:** \ **Category:** NYSpeed Off Topic\ **Created:** [August 31, 2011, 9:21am UTC](https://forums.speedlife.net/t/need-a-strong-password/216058 "2011-08-31T09:21:02Z")\ **Posts on this page:** 4\ **Page:** 4
**Author:** ![chasemanmusic](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/chasemanmusic/32/6124_2.png) [@chasemanmusic](https://forums.speedlife.net/u/chasemanmusic)\ **Post date:** [September 11, 2011, 5:57pm UTC](https://forums.speedlife.net/t/need-a-strong-password/216058/61 "2011-09-11T17:57:51Z")
Ha that is hanging in my office ---------- Post added at 08:56 PM ---------- Previous post was at 08:45 PM ---------- > [@boxxa](#): > > On a serious note, the worry is that someone who steals a weaker DB like NYSpeed will have your email and password and the general user uses the same password for every account they can. > > NYSpeed DB -\> username, email, password -\> try password as email password -\> find past emails for accounts such as FB, banks, etc. and reset passwords since you can view the email -\> access to more sites with just your NYSpeed password > > Smart people have weaker passwords for sites, more complex ones for more sensitive information adn then the central email accoutn should be super secure. It may sound simple to tech people but a lot of people do not really think about this. > > Esp when some asshat in a backhoe hits it. Tru dat ---------- Post added at 08:57 PM ---------- Previous post was at 08:56 PM ---------- Yea just figured out how to do that. That is what is hanging in my office. > [@boxxa](#): > > On a serious note, the worry is that someone who steals a weaker DB like NYSpeed will have your email and password and the general user uses the same password for every account they can. > > NYSpeed DB -\> username, email, password -\> try password as email password -\> find past emails for accounts such as FB, banks, etc. and reset passwords since you can view the email -\> access to more sites with just your NYSpeed password > > Smart people have weaker passwords for sites, more complex ones for more sensitive information adn then the central email accoutn should be super secure. It may sound simple to tech people but a lot of people do not really think about this. > > Esp when some asshat in a backhoe hits it. > [@boxxa](#): > > dasd$3rfd@ is not a secure password. > R3@llyC00l is not a secure password. > > redhorsepilotcanyon is more secure mathematically. also, based on general public, companies that require 8-10 letter “complex” passwords leave their users to write them down on a pad of paper next to their desk. companies that do not allow long passwords are less secure than the admin making password rules like the following list I have seen: > > no repeating letters > must contain letter, number, and symbol > must not be one used the last 10 times > must start with a capital letter (this itself makes the first character only 26 guesses) > > Also, certs are only as trust worthy as the providers of them. The best security that is used at high level banks is client certs that are all based on machines and issued on an internal CA. Hell, the Iranian government was issued certificates to man in the middle all the Google sites recently. > > ![http://imgs.xkcd.com/comics/password_strength.png](https://canada1.discourse-cdn.com/flex034/uploads/speedlife/original/3X/f/4/f4ac89b0bb201d6dc51e2bf969f41b7972550375.png) > > Also, if you have no account locking on failed login attempts, you deserve to be hacked. ---
**Author:** ![chasemanmusic](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/chasemanmusic/32/6124_2.png) [@chasemanmusic](https://forums.speedlife.net/u/chasemanmusic)\ **Post date:** [September 11, 2011, 7:35pm UTC](https://forums.speedlife.net/t/need-a-strong-password/216058/62 "2011-09-11T19:35:56Z")
Have you guys heard of pass the hash? [http://oss.coresecurity.com/projects/pshtoolkit.htm](http://oss.coresecurity.com/projects/pshtoolkit.htm) Pretty cool stuff. Windows cant fix this i heard. ---
**Author:** ![Random\_Hero](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/random_hero/32/5235_2.png) [@Random\_Hero](https://forums.speedlife.net/u/Random_Hero)\ **Post date:** [September 18, 2011, 7:18am UTC](https://forums.speedlife.net/t/need-a-strong-password/216058/63 "2011-09-18T07:18:25Z")
> [@tpgsr](#): > > SHIT that thing guessed my password. Crazy. It is/soon to not be \*\*\*\*\*\*\*\*\* > > Edit: wow, if you type your password the forum automatically replaces it with asterisks. Cool. Really? Thats pretty cool…why does it do that? gingersnaps69 ---
**Author:** ![boxxa](https://yyz2.discourse-cdn.com/flex034/user_avatar/forums.speedlife.net/boxxa/32/5045_2.png) [@boxxa](https://forums.speedlife.net/u/boxxa)\ **Post date:** [September 19, 2011, 5:58am UTC](https://forums.speedlife.net/t/need-a-strong-password/216058/64 "2011-09-19T05:58:16Z")
> [@Random\_Hero](#): > > Really? Thats pretty cool…why does it do that? > > gingersnaps69 Hahahahahahahahahhahahahahahahahahahah [Previous page](https://forums.speedlife.net/t/need-a-strong-password/216058.md?page=3)