Warning: change your password please!

[Mr. Widget]

If your password is password then it's not hard to crack, these attacks target the low hanging fruit.

Damn! You just let the cat out of the bag. Now I have to change mine!

 

[Blumlein 88]

Damn! You just let the cat out of the bag. Now I have to change mine!

Just a suggestion. Use Password2. That way you get upper and lower case plus numbers and it is one character longer. Easy to remember it as your second password.

 

[JP]

Nah, use 1337. That's the super-secret way.

 

[Astoneroad]

...these attacks target the low hanging fruit.

In that case, a good preventative password would be "BoxerBriefs".

 

[jsilvela]

On the idea of leaving password managers because of the LastPass thing.
Found this useful https://infosec.exchange/@epixoip/109585049354200263
IMO the usability of a password manager is far better than a notebook which will not be available from your office or while you travel.

 

[Andysu]

they would only be hacking for rich audiophiles here that have expensive speakers . a bose owner here ain't worth hacking

 

[MZKM]

Enable 2FA as others said, on ASR it has me use Google’s Authenticator app for the temp passcode.

 

[SimpleTheater]

Thanks Amir. Just changed my passsword to BoseSucksAndCostsTooMuch$

 

[Mr. Widget]

Thanks Amir. Just changed my passsword to BoseSucksAndCostsTooMuch$

Add two more $$... for more accuracy and better protection.

 

[dasdoing]

On the idea of leaving password managers because of the LastPass thing.
Found this useful https://infosec.exchange/@epixoip/109585049354200263
IMO the usability of a password manager is far better than a notebook which will not be available from your office or while you travel.

how to migrate?
I have over a thousand passwords in LP, though most are trash

 

[Andreas007]

What do you suggest, writing them on a notepad and putting in a drawer?

Seriously, if you have a unique password for every site, then you aren't going to remember 10+ login passwords (presuming they are decent passwords).

Actually, this may be really a good idea, practical issues aside. Your passwords are disconnected from the net. But keyloggers remain a problem.

If your home is compromised you have other problems than your passwords: Your complete „secure“ living space is compromised. You can‘t even be sure that new passwords you create aren’t eavesdropped in some way. Physical access to your IT systems without your knowledge is also a security nightmare.

A good advice which is not often mentioned is to never distribute or use your prime email account name for registering other accounts. Always use aliases instead. Then, data leaks won‘t affect you because for most email providers alias log-in won‘t work.
And, keep the email login PW in your head and use 2FA. With these simple measures I see no way that someone could hijack your email account (which is basically the key to everything because you need it to reset and change passwords of all your other accounts).

 

[ReluctantGT]

how to migrate?
I have over a thousand passwords in LP, though most are trash

The only way to mitigate the LP breach is to change the passwords for the sites in your vault (that haven't been changed since before the breach), or at least enable MFA on those sites. Migration is pretty easy. You can export your LP vault to a text file then import it into your new PW manager of choice. Or just print them all out and keep it tucked under your tinfoil hat.

 

[Soniclife]

How are we on page 4 of this thread and no one has yet pointed out that the correct password we should all be using is correcthorsebatterystaple.

 

[ReluctantGT]

How are we on page 4 of this thread and no one has yet pointed out that the correct password we should all be using is correcthorsebatterystaple.

 

[Digby]

Try getting many (most?) services to accept a password without upper and lower case, numbers and special characters. It seems online services haven't got the memo!

 

[respice finem]

Thanks Amir. Just changed my passsword to BoseSucksAndCostsTooMuch$

But, a password shouldn't be something everyone knows

 

[Fahzz]

The Steve Hoffman Forum had the same problem this week.

 

[stunta]

No panther for this post? ok, my new password is PinkPanther404.

 

[respice finem]

The panther has been stolen

 

[martijn86]

Thanks Amir. Just changed my passsword to BoseSucksAndCostsTooMuch$

Audiophile-network-switches-need-a-powerconditioner-2