TER General Board

Password security
bikebryan 18 Reviews 3273 reads
posted

The biggest weakness in any computer security system is user passwords.  The best passwords meet requirements lined up with these general rules:

1.  Length between 8 and 14 characters.
2.  Contains at least one uppercase character.
3.  Contains at least one lowercase character.
4.  Contains at least one numeral.
5.  Contains at least on special symbol.
6.  Contains no words you can find in a dictionary, even embedded within the password.

Password crackers look for words and combos based on user names and can even be set to use words/items specific to an indvidual user.  By using the 6 rules above I have never had a password cracked, even working in an organization that actively tries to crack user passwords on a continual basis.

I recently had my e-mail account hacked into and later recovered.  I'm wondering, though, what legally can be done?  The person, as far as I can tell, didn't send out any malicious e-mails, and most of my new e-mails were left unread.  Are there any legal ramifications?  Or is this so common that I should just be happy I got my account back and leave it at that?  Thanks for the help.

skisandboots2523 reads

Use the "crane" technique that Mr. Miyagi taught you.  Remember "wax on, wax off".

You can not do anything legally unless you can track the person down using any electronic trail that they left.  Even if you track the person down, you would have to prove that they intended to do you harm instead of the person accidentally stumbling into your email account due to someone else's mixup.

In any case, change your password.  Use a complex password that is not a word in any dictionary.  Don't use a person's name.  Don't use two words strewn together.  Don't use a word or name spelled backwards.  Don't use the capability to answer a secret question to have the system send you the password if you "forget" it.  If your mail system insists on it, write your mother's maiden name in gibberish.

No Ideas?  Generate a random number on a spreadsheet.  It will look like a percentage.  (.#########).  Take two letters (not your initials) & put them in the front.  Then your password will look like LL#########.  (LL are the two letters you picked).  Even better, put the second letter someplace in the middle of the word (L###L######).  Even if the person knows how you made the password, they will have to try more than 10 billion combinations to search for it.  If you cannot remember it, hide it in your wallet where you used to hide your condom when you were a kid.


The biggest weakness in any computer security system is user passwords.  The best passwords meet requirements lined up with these general rules:

1.  Length between 8 and 14 characters.
2.  Contains at least one uppercase character.
3.  Contains at least one lowercase character.
4.  Contains at least one numeral.
5.  Contains at least on special symbol.
6.  Contains no words you can find in a dictionary, even embedded within the password.

Password crackers look for words and combos based on user names and can even be set to use words/items specific to an indvidual user.  By using the 6 rules above I have never had a password cracked, even working in an organization that actively tries to crack user passwords on a continual basis.

Unfortunately you have no legal recourse...email is not governed under the same privacy act regulations that regular mail is.  Even when you get emails that say if your not the person reading this email delete it..thats just lawyer mumbo jumbo and won't ever hold water in court.  Best thing I can suggest..get a new email account...and make the password so hard to you almost forget it yourself.  Best of luck.

Register Now!