home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
Hackers Underworld 2: Forbidden Knowledge
/
Hackers Underworld 2: Forbidden Knowledge.iso
/
HACKING
/
ISSM202.TXT
< prev
next >
Wrap
Text File
|
1994-07-17
|
53KB
|
1,930 lines
The Information Systems Security Monitor
_______ /--------\ /--------\ \ /|
| | | | \ / |
| | | | \ / |
| \_______ \_______ | \ |
| \ \ | |
| | | | |
| | | | |
| \________/ \________/ | |
-------
Dedicated to the pursuit of security awareness............
=================================================================
Volume 2 Number 2 April 1992
=================================================================
////////////////////// In this Issue \\\\\\\\\\\\\\\\\\\\\\\\\\\
Choosing the Right Password
Comptroller General Decision on EDI
Security Hall of Fame
OAIS Employees Judge Student Contest
Cyberspace: A Hacker's Response
Quick Fix Security
Dear Clyde
Computer Speak
What's New
----------------------------------------------------------------
Hacker Lists Passwords Hackers Look For
Choosing the Right Password!
Imagine a hacker entering a system with your id and password
because you did not take the time to choose a good password, this
is something that can be completely prevented if people would take
a few minutes to choose a good password. You must be creative when
choosing a password not lazy. Since a password is usually the
first line of defense against unauthorized access to a computer
system, when the first line is broken the rest only take time. The
average user usually has a password that is easy to select and easy
to remember. Any word that is easy to select or is contained in
a dictionary is a poor and insecure selection for a password. The
reason this makes a poor selection is because these words are the
first ones an intruder will try when attempting to compromise your
system. For instance, if your name is Tom Smith and your logon id
is TSMITH your password should not contain any variation of these
two words (Tom & Smith). A hacker will try TSMITH, SMITHT,
TOMSMITH, SMITHTOM, TSMITH1, HTIMST, etc. before anything else.
As far as the length of a password goes its definitely the longer
the better. To demonstrate this point I give you the following
table:
# of Possible Average Time
Characters Combinations To Discover Example
1 36 6 min q
2 1,300 4 hrs bt
3 47,000 5 days tyu
4 1,700,000 6 months insw
5 60,000,000 19 years potnb
etc...
The greater the number of possibilities a hacker must sort through,
the better the chances of a password remaining undiscovered.
The best passwords are those that contain a combination of letters
and numbers or are a combination of two or more unrelated words
i.e. TREEFLOOR, TVBOOK, RADIOSHOE, etc. Another possibility is to
select the initials of your two grandmothers combined with the
number of times you have seen your favorite movie to come up with
a password that resembles PAWH07, 07WHPA, PA07WH, etc.
If you think that you have chosen a password that is hard to guess
or would take too much time to guess keep in mind that hackers have
automated the process. There have been programs written for the
sole purpose of guessing passwords, they take a list similar to the
one in this article and try each and every one of them
These are the types of passwords that are hard to guess and will
most likely not be found in any dictionary or word list. I am
enclosing a list of common passwords that most hackers have a
variation of, under no circumstances should you ever use a word
contained in this list. All forms of profanity should also be
included in this list.100
666
6969
aaa
abc
abel
academia
academic
academie
access
ada
adele
adeline
adelphe
admin
adrian
aerobic
aerobics
agathe
agnes
aide
aime
aimee
airplane
alain
alban
albanie
albany
albatros
albatross
albert
alex
alexander
alexandre
alf
algebra
algebre
alias
aliases
alice
alida
alix
alpha
alphabet
alphonse
ama
amadeus
amandine
ambroise
amedee
ami
amorphe
amorphous
amour
amy
an
analog
analogue
ananas
anchor
ancre
andre
andromache
andy
angele
angerine
anicet
animals
animaux
anne
annie
annonciation
anselme
answer
anthelme
antoine
antoine-marie
anvils
anything
aout
apollinaire
apolline
apotre
aquin
arc
aria
ariane
aristide
armand
armel
arnaud
arrow
arsene
arthur
ascension
asd
asm
assise
assomption
athena
athenes
atmosphere
aubin
aude
audrey
augustin
automne
autoroute
avent
avila
avion
avril
aymar
aymard
aztecs
aztecs
azur
azure
bacchus
badass
bailey
balance
banana
bananas
banane
bande
bandit
banks
banque
baptiste
barbara
barber
barbier
bariton
baritone
barnabe
barnard
bart
barthelemy
bartman
basic
basile
bass
basse
basson
bassoon
batch
batman
baudouin
beach
beater
beaute
beauty
beaver
beethoven
belier
beloved
benedicte
benoit
benz
beowulf
berkeley
berlin
berline
berliner
bernadette
bernard
bernardin
bertille
bertrand
beryl
beta
everly
bicameral
bienheureux
bienvenue
bishop
bitch
blaise
bob
boris
bradley
brian
brice
brigitte
broadway
bruno
bsd
bumbling
burgess
cad
cafe
calude
camarade
campanile
cancer
cantor
capricorne
cardinal
careme
carine
carmel
carmen
carole
carolina
caroline
carson
cartouche
cascades
casimir
cassis
castle
castle
cat
catherine
cayuga
cecile
celine
celtics
cendres
cerulean
challenger
change
chantal
charles
charlotte
charmant
charming
charon
chat
chateau
chem
chemin
chemistry
chess
chester
cheval
chevalier
chien
chou
christ
christian
christine
christophe
cible
cigar
cigare
citroen
claire
clarisse
class
classic
classique
claude
clemence
clement
clotilde
cluster
clusters
code
coeur
coffee
coke
colette
collins
come
computer
comrade
comrades
conception
condo
condom
connect
console
constant
constantin
conversion
cookie
cooper
corinne
cornelius
couscous
create
creation
creosote
crepin
cretin
criminal
croix
cshrc
cyrille
daemon
dame
damien
dancer
daniel
danny
dapper
data
dave
davy
deb
debbie
deborah
december
decembre
default
defoe
defunts
delphine
deluge
denis
denise
desperate
develop
device
dial
diane
didier
diet
dieter
dieu
digital
dimanche
dimitri
disc
discovery
disk
disney
dog
dominique
donald
donatien
dos
drought
duncan
dupond
dupont
durand
dwladys
eager
earth
easier
easy
eatme
eau
edges
edinbourg
edinburgh
edith
edmond
edouard
edwige
edwin
egghead
eiderdown
einstein
elephant
elisabeth
elisee
elizabeth
ella
ellen
email
emeline
emerald
emeraude
emile
emilie
emma
enclumes
endeavour
enemy
engin
engine
engineer
entreprise