Article: Why passwords have never been weaker and crackers have never been stronger

re: Article: Why passwords have never been weaker and crackers have never been stronger

Per Thorsheim — Thu, 23 Aug 2012 20:14:41 GMT

We did two days in 2010 and 2011 tzink, but this year we are doing 3 - three - full days. :-)

re: Article: Why passwords have never been weaker and crackers have never been stronger

tzink — Thu, 23 Aug 2012 05:40:23 GMT

Hi, Per,

Thanks for commenting on this blog, especially as you're one of the interviewees in the article I discussed.

Your conference also looks intriguing; I never knew that topics around password security could take up two full days!

re: Article: Why passwords have never been weaker and crackers have never been stronger

sg Marshall — Thu, 23 Aug 2012 05:27:11 GMT

I’ve given up on trying to get people to use very strong passphrases, as many sites do not support them. The result being that many people have been trained to use less secure passwords (the least common denominator) acceptable to most sites.

Instead of having one algorithm to enforce a site’s password, one should use a series of well-defined algorithms to support strong passwords of varying types.

re: Article: Why passwords have never been weaker and crackers have never been stronger

Per Thorsheim — Wed, 22 Aug 2012 08:42:54 GMT

I'm one of those interviewed for the article at Ars Technica by Dan Goodin, and I'm the guy who warned the media about the Linkedin breach in June.

May I suggest attending our Passwords^12 conference in Oslo (Norway, on December 3-5? I think it is the first-ever conference series that is all about passwords & PINs, nothing else. Registration opens 1-2 week of September. CFP & more info: securitynirvana.blogspot.no/.../passwords12-call-for-presentations.html