Slashdot Mirror
Password Reuse Tool Makes It Easy To ID Vulnerable Accounts On Other Sites (arstechnica.com)
Dan Goodin, reporting for Ars Technica: Over the past few months, a cluster of megabreaches has dumped account credentials for a mind-boggling 642 million accounts into the public domain, where they can then be used to compromise other accounts that are protected by the same password. Now, there's software that can streamline this vicious cycle by testing for reused passcodes on Facebook and other popular sites. Shard, as the command-line tool has been dubbed, is designed to allow end users to test if a password they use for one site is also used on Facebook, LinkedIn, Reddit, Twitter, or Instagram, its creator, Philip O'Keefe, told Ars. The security researcher said he developed the tool after discovering that the randomly generated eight-character password protecting several of his accounts was among the more than 177 million LinkedIn passwords that were leaked in May. "I used that password as a general password for many services," he wrote in an e-mail. "It was a pain to remember which sites it was shared and to change them all. I use a password manager now."
Lets use a tool that sends a known password to a whole bunch of sites to see if it works there. What could possibly go wrong?
This idea is fundamentally flawed.
How many people in the US have to die before we realize that private ownership of guns is terrible idea?
You don't need a gun. If you have one, you can dispose of it at any police station, no questions asked.
If you're referring to the shooting in MI that's all over the news right now, this had nothing to do with private gun ownership. A criminal defendant in a courthouse grabbed a gun from a bailiff and shot two court officers.
Nice try.
We don't need guns in court houses either, IMHO.
Courthouses should be secure, which is why police protect them with guns and other weapons. It makes perfect sense that police and armed guards would be present in a place where violent criminals are also present, just like police and and armed guards provide security at prisons. You, however, cannot bring guns or other weapons into courthouses. That is why you have to go through a metal detector and empty your pockets on the way in.
A security researcher didn't already use a password manager? That, 8-character password, and password reuse doesn't inspire confidence in the tool he wrote...
On a list. Haha
Facebook records the passwords used in your failed login attempts. If you forgot which of your passwords is used on a given site, you are potentially divulging your passwords to many sites. Facebook may not be alone in this.
I don't believe you. Link?
That really seems to depend on the state. In Arizona at least, there were 27 white guys shot by police last year. And yet, there was just 1 black person shot.
If we follow black lives matter logic, then police are clearly discriminating against white people in my state, and we should start a white lives matter movement.
Or if we simply follow rational logic instead, then we clearly see different behavior patterns in different racial groups in different geographical regions.
Arizona has some of the most lax gun laws, by the way. For example, you don't need a permit to conceal carry here, and there are practically no limits on the type of weapon you can carry so long as it doesn't break federal rules. You can however sidestep federal rules here if you mill your own weapon.
Allowing arms to rest in the hands of "responsible" governments while denying them to citizens hasn't historically worked better, and the data on modern societies is not statistically sound for projecting success on the US.
How many people in the US have to die before we realize that private ownership of guns is terrible idea?
You don't need a gun. If you have one, you can dispose of it at any police station, no questions asked.
Although there may be some merit to what you say, I fail to see what it has to do with a password reuse tool.
If I can be modded down for being a troll, can I be modded up for being an orc, or a balrog?
the randomly generated eight-character password protecting several of his accounts was among the more than 177 million LinkedIn passwords that were leaked in May
Either he was part of the leak, and then it doesn't matter how long and strong his password was, only that he reused it (and the site did not salt enough); or it was someone else's password too by chance, but then it wasn't random, by at least three orders of magnitude, if it was found among ~2E8 "random" passwords.
Every end has half a stick.
How many people in the US have to die before we realize that private ownership of guns is terrible idea?
You don't need a gun. If you have one, you can dispose of it at any police station, no questions asked.
Go ahead and walk into a police station with a gun and let natural selection determine what the results will be.
I have not seen it this way till now but now you convinced me that disarming yourself is an idea that can easily kill you thus should not be followed.
If you say "white lives matter", then you're racist.
If you say "black lives matter", then you're progressive.
I find it odd that violent gun crimes are at a record low while at the same time the US actually has fewer mass shootings per capita than Europe, yet somehow these mass shootings in the US are being called epidemic by the media.
Everything is an epidemic to the media, it's one of their favorite words. Epidemic of cop shootings. Epidemic of lost dogs. Epidemic of divorces. Epidemic of broken cups.
These days there's dozens if not hundreds of sites you can "sign in with" trivially, but so few support anything more than perhaps Facebook.
Just avoid passwords entirely: Let one of the big movers/shakers handle your user auth, stop creating accounts yourself. XD
I find it odd that I don't hear about all these European cases, but rather the ones that happen on a daily basis in US.
"Wait. Something's happening. It's opening up! My God, it's full of apricots!"
It's called sensationalisim. Our media is more about entertainment and less about news.
Europeans need to understand that our news is more like the "SUN" and other tabloid news and less like the BBC.
Do not look at laser with remaining good eye.
I've got 6 guns! and I can hear them all whisper to me to go on a murder spree... I tell them to shut up and cover my head at night with a pillow so I cant hear those dirty rotten guns trying to get me to go kill...
Why did they not tell me that guns do mind control and are sentient? I need to sue the Firearms store for not telling me!
Do not look at laser with remaining good eye.
"The security researcher said he developed the tool after discovering that the randomly generated eight-character password"
Wait, what do you mean he "discovered" this? Doesn't this "researcher" know what his own fucking passwords are?
-
"I used that password as a general password for many services," he wrote in an e-mail.
What he meant to say was, "I claim to be a security researcher but really I'm just a hypocritical idiot who doesn't practice what I preach."
Just cruising through this digital world at 33 1/3 rpm...
As I don't have an account with Facebook, LinkedIn, Reddit, Twitter, nor Instagram, I should be fine then.
/. karma.
I use the same login here, at Soylent, Fark, Ars, and a couple others I can't think of off the top of my head. Guess what? I use the same password too. Why? I don't care if someone steals my
My banks and anyone with my credit card #? You bet they all have different logins and passwords, for which I use keepass to manage.
Seems like a more useful solution for most ppl since you want to trust the thing you give all your passwords to .. . a lot. Plus the fact that ppl might actually use it if LastPass or Google do it.
Google can just implement it right in their password sync feature.
Nice try at giving a fake citation. Your "link'" is returning results for "gun crime statistics us graph". Where does Europe come into play here?
As an european, the last Mass shooting we had was Paris, which is, well, not quite comparable to your domestic gun massacres.
If you have any real citation, I'd appreciate, but as it stands, you just try to spread FUD.
You forgot the epidemic of retarded comments on ./
I am not an American. You do have a fracking epidemic. The "0 Days since last mass shooting"-Meme is right on spot.
What you need to do is let your fricking guns go. You do not need them. And when you finally get that, the policing will be metric shitloads (yes, metric, because you will surely adopt the superior metric system before you let your guns go) more effective, because someone who carries a gun is a bloody criminal.
It does work for about every nation.
Americans need to understand that you do have shitty news, but two wrongs do not make a right. You do have a blatantly excessive regime of guns.
Let them go. You dont need them. Like you can fend of the Evil Government with a gun. No, you cant. You can die trying, thats probably a reasonably cause if one is looking at the whole picture, but in the end, you will be another domestic terrorist or mass shooter. And nothing has changed.
This is why people transporting prisoners should not carry guns. If the bailiff hd been armed with a nightstick, there would very likely be three more people alive tonight.
Or just start using Lastpass...
TBH i didn't get how this software works. You type the password and it checks it against a few sites? Thats it? That would be incredibly ineffective...
I have over 100 sites and passwords on my Lastpass Vault and it can tell me where and what passwords are currently being reused.
I've got 6 guns!
You're a psychopath. Nobody needs a single gun let alone 6. I can't wait for the day that all the guns are rounded up and ground down into a fine powder.
Which one? How about both points I made:
http://www.pewresearch.org/fac...
http://crimeresearch.org/2015/...
Somehow the gun control crowd thinks that it's worse now than ever, but the available evidence just doesn't support that claim.
http://crimeresearch.org/2015/...
And yet strangely enough we don't hear the same rhetoric about Canada, Norway, or the dozens of other countries who allow private ownership of firearms. I honestly thing Europeans who say what you say are just full of themselves. Especially the ones who say "the rest of the world does x", or saying that "the US right of the rest of the world" when they're just talking about Europe as if just fucking Europe is the entire rest of the world. (I especially find it odd that they consider the US to be more authoritarian than nearly every Asian country, who far outnumber Europe, in addition to flat out ignoring politics in the Middle East, Africa, and South America...because, you know, all that matters is fucking Europe.)
The later makes sense, actually. You won't hear a progressive admit this even though deep down they know it's a fact, but progressive is really just a label that somebody places upon themselves when they're convinced that they've somehow figured it all out, and that only their views can possibly be the way forward, so fuck everybody else's perspective on any given matter because they're the only enlightened one in the world.
And speak of perspective, progressive, by the way, is a term that groups such as prohibitionists, Nazis, and a number of other infamous groups have applied themselves in the past, even though in the end they turned out to be way wrong.
You do hear about "all these European cases", there aren't very many of them. The site "Armored Dragon" linked does an old, old trick of American pro-gun nuts by just claiming it's not a "mass shooting" unless lots of people die. The result is that only a handful of cases, mostly terrorist attacks, show up, whether in the US or Europe and in that noise you can claim it's not an American problem.
And yet strangely enough we don't hear the same rhetoric about Canada, Norway, or the dozens of other countries who allow private ownership of firearms.
They do it without the gun fetishism.
Right there. What an idiot.
but its random and very hard to remember!
Considering I am american your whole argument fell apart like the poorly assembled straw man it is.
Do not look at laser with remaining good eye.
You won't hear a conservative admit this even though deep down they know it's a fact, but conservative is really just a label that somebody places upon themselves when they're convinced that they've somehow figured it all out, and that only their views can possibly be the way to do things, so fuck everybody else's perspective on any given matter because they're the only enlightened one in the world.
Fixed that for you, or gave you a new perspective on it. Don't tell me it's not true. You know it is. You just don't want to admit it.
And speak of perspective, conservative, by the way, is a term that groups such as prohibitionists, Nazis, and a number of other infamous groups have applied themselves in the past, even though in the end they turned out to be way wrong.
True story, Moonshiners often perceived themselves as Conservative, and against the Revenue agents, and went to some lengths to violently resist taxation. The Whiskey Rebellion may be the most prominent, but it wasn't the only example. Of course, the Temperance movement was highly religious, Christian and ultimately Conservative as well. And they were often stridently anti-Catholic due to that religion's continued use of wine.
And the Nazi's? They were a Fusion Populist Party, they pulled as much from "The Glorious German Past" as any ideas of the future. They embraced as many conservatives as they suppressed. It was all about power for them. If supporting the family got them support, go for it. If supporting some breeding the new superior man was good? Go for it.
But seriously, so what if they called themselves "progressive" or "socialist" ? It's not like words have defined meanings that can't be used by dishonest men to misrepresent them. Or ignorant. Prairie Dogs aren't canines, and the Holy Roman Empire was none of the above. And there is no cause so pure it can't be used for evil.