Random Thread - Anything Goes

dafyre

@tonyshowoff said in Random Thread - Anything Goes:

@scottalanmiller said in Random Thread - Anything Goes:

@dafyre you'd escape. You might not live, but you'd escape.

You don't know that, maybe there's a small swimming pool, dirty mattress, trampoline, or bed of spikes at the bottom.

Depends on who you are too... If you're Liam Neeson, I'd expect a bed of spikes at the bottom cause... you know, he'd just throw you down the slide... but if you're say... Jackie Chan, I could see there being a trampoline.

dafyre

@nadnerB said in Random Thread - Anything Goes:

*groan

nadnerB

@dafyre said in Random Thread - Anything Goes:

@nadnerB said in Random Thread - Anything Goes:

*groan

Koalafied dad joker

tonyshowoff

@nadnerB said in Random Thread - Anything Goes:

Win what? Both are terrible approaches to passwords.

dafyre

@tonyshowoff said in Random Thread - Anything Goes:

@nadnerB said in Random Thread - Anything Goes:

Win what? Both are terrible approaches to passwords.

Free network pwnage with every Posty Boi.

tonyshowoff

@dafyre said in Random Thread - Anything Goes:

@tonyshowoff said in Random Thread - Anything Goes:

@nadnerB said in Random Thread - Anything Goes:

Win what? Both are terrible approaches to passwords.

Free network pwnage with every Posty Boi.

Until I get the password file or SAM file (no, not that SAM) and then crack all those kick ass, secure 10 character passwords fairly fast and instead of just having access to the secretary's Office 365 account, I now have access to everything because people thought characters and numbers really made that much of a difference with entropy. On my networks I always enforce at least 15 character pass phrases. It used to be 12.

Something I'm sure most people here have seen but still applicable:
https://xkcd.com/936/

Saying a password is "complex" just means "more likely to be written down", it doesn't mean "secure." Length, especially with slightly mispelled words or replacing a letter with a number, in order to avoid compound dictionary attacks does a whole hell of a lot better. It's easier to remember: purplem0nkeedishwasher than it is to remember S!kl33S(I@ and it's immensely more secure. 10 character passwords are peanuts, no matter what characters they have in them, especially with GPU crackers. It's basically obsolete advice.

scottalanmiller

@tonyshowoff https://imgs.xkcd.com/comics/password_strength.png

LilAng

@scottalanmiller said in Random Thread - Anything Goes:

@tonyshowoff https://imgs.xkcd.com/comics/password_strength.png

i'm stealing this

PhlipElder

@dafyre said in Random Thread - Anything Goes:

@tonyshowoff said in Random Thread - Anything Goes:

@nadnerB said in Random Thread - Anything Goes:

Win what? Both are terrible approaches to passwords.

Free network pwnage with every Posty Boi.

Heh ... I remember seeing a well dressed fellow with stickies on his laptop while waiting for a flight at the airport in Edmonton. Curiosity got the best of me so I took a boo while I took a gander by and sure enough it wasn't hard to see that it was his username and passwords.

SMH

Nice suit not so smart.