Heise Medien on Mastodon

0 Beiträge0 Beteiligte0 Beiträge heute

Vivaldi🔒It's World Password Day and we'd like to remind you that a good password is like a good joke – not too short, not too obvious, and definitely not something you've told your friends, family, or everyone at the office!<a href="https://social.vivaldi.net/tags/WorldPasswordDay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WorldPasswordDay</a> <a href="https://social.vivaldi.net/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwords</a> <a href="https://social.vivaldi.net/tags/Password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Password</a> <a href="https://social.vivaldi.net/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://social.vivaldi.net/tags/tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tech</a> <a href="https://social.vivaldi.net/tags/Technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Technology</a> <a href="https://social.vivaldi.net/tags/browser" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#browser</a>

Flipboard Tech DeskGoogle has kicked off World Password Day by announcing that over 400 million users have used passkeys since the tech giant rolled them out, logging over one billion authentications between them.Passkeys rely on device-based authentication, often using a fingerprint scanner or face recognition, which makes logging in faster and more secure. Despite this, our passwordless future still feels some way off — <a href="https://flipboard.com/@theverge" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@theverge</a> considers why.<a href="https://flip.it/vvLM1A" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://flip.it/vvLM1A</a> <a href="https://flipboard.social/tags/Passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passwords</a> <a href="https://flipboard.social/tags/Passkeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passkeys</a> <a href="https://flipboard.social/tags/Authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Authentication</a> <a href="https://flipboard.social/tags/WorldPasswordDay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WorldPasswordDay</a> <a href="https://flipboard.social/tags/Tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tech</a>

Marcel SIneM(S)USWelt-Passwort-Tag: Auf die Länge kommt es an | Security <a href="https://www.heise.de/news/Welt-Passwort-Tag-Auf-die-Laenge-kommt-es-an-8982187.html" rel="nofollow noopener noreferrer" target="_blank">https://www.heise.de/news/Welt-Passwort-Tag-Auf-die-Laenge-kommt-es-an-8982187.html</a> <a href="https://social.tchncs.de/tags/WorldPasswordDay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WorldPasswordDay</a> <a href="https://social.tchncs.de/tags/Passwort" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passwort</a> <a href="https://social.tchncs.de/tags/password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#password</a>

Jeremi M Gosney :verified:Happy <a href="https://infosec.exchange/tags/WorldPasswordDay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WorldPasswordDay</a>!I've cracked billions of <a href="https://infosec.exchange/tags/passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passwords</a> from tens of thousands of <a href="https://infosec.exchange/tags/data" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#data</a> <a href="https://infosec.exchange/tags/breaches" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#breaches</a> in the past 12+ years, and because of this, I likely know at least one <a href="https://infosec.exchange/tags/password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#password</a> for 90% of people on the Internet. And I'm not alone! While I primarily crack breached passwords for research purposes and the thrill of the sport, others are selling your breached passwords to criminals who leverage them in <a href="https://infosec.exchange/tags/AccountTakeover" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AccountTakeover</a> and <a href="https://infosec.exchange/tags/CredentialStuffing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CredentialStuffing</a> attacks. How can you keep your accounts safe?- Use a <a href="https://infosec.exchange/tags/PasswordManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordManager</a>! I recommend <a href="https://fosstodon.org/@bitwarden" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@bitwarden</a> and <a href="https://1password.social/@1password" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@1password</a> - Use a <a href="https://infosec.exchange/tags/Diceware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Diceware</a> style <a href="https://infosec.exchange/tags/passphrase" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#passphrase</a> - four or more words selected at random - for passwords you have to commit to memory, like your master password!- Enable MFA for important online accounts, including cloud-based password managers!- Harden your master password by tweaking your password manager's KDF settings! For <a href="https://infosec.exchange/tags/Bitwarden" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Bitwarden</a>, use Argon2id with 64MB memory, 3 iterations, 4 parallelism. For <a href="https://infosec.exchange/tags/1Password" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#1Password</a> and other PBKDF2 based password managers, set the iteration count to at least 600,000. - Use unique, randomly generated passwords for all your accounts! Use your password manager to generate random 14-16 character passwords for everything. Modern password cracking is heavily optimized for human-generated passwords, because humans are highly predictable. Randomness defeats this and forces attackers to resort to incremental brute force! There's no trick you can do to make a secure, uncrackable password on your own - your meat glob will only betray you.- Use an ad blocker like <a href="https://infosec.exchange/tags/uBlock" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#uBlock</a> Origin to keep you safe from password-stealing <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#malware</a> and other browser based threats!- Don't fall for <a href="https://infosec.exchange/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#phishing</a> attacks and other social engineering attacks! Browser-based password managers help defend against phishing attacks because they'll never autofill your passwords on fake login pages. Think before you click, and never give your passwords to anyone, not even if they offer you chocolate or weed.- <a href="https://infosec.exchange/tags/Enterprises" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Enterprises</a>: require ad blockers, invest in an enterprise password management solution, audit password manager logs to ensure employes aren't sharing passwords outside the org, implement a Fine Grained Password Policy that requires a minimum of 20 characters to encourage the use of long passphrases, implement a password filter to block commonly used password patterns and compromised passwords, disable <a href="https://infosec.exchange/tags/NTLM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NTLM</a> authentication and disable RC4 for <a href="https://infosec.exchange/tags/Kerberos" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Kerberos</a>, disable legacy broadcast protocols like LLMNR and NBT-NS, require mandatory <a href="https://infosec.exchange/tags/SMB" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SMB</a> signing, use Group Managed Service Accounts instead of shared passwords, monitor public data breaches for employee credentials, and crack your own passwords to audit the effectiveness of your password policy and user training!

Jan Wildeboer 😷:krulorange:Tomorrow is <a href="https://social.wildeboer.net/tags/WorldPasswordDay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WorldPasswordDay</a>, the day the Royal Password Society will publish the safest password for the next 12 months. Wait for the official announcement and don 't fall for supposed leaks! Those are from evil phishers! <a href="https://social.wildeboer.net/tags/SarcasmButOnlyHalf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SarcasmButOnlyHalf</a>

Frühere Suchanfragen

Suchoptionen

Verwaltet von:

Serverstatistik:

#worldpasswordday