Password Security - Revision history

NKirnbauer: expired link changed with link from wayback machine

2024-08-28T16:57:03Z

expired link changed with link from wayback machine

← Older revision		Revision as of 16:57, 28 August 2024
Line 201:		Line 201:
	== References ==		== References ==

	* [1] https://www.owasp.org/images/1/1c/OWASP-IoT-Top-10-2018-final.pdf		* [1] http://web.archive.org/web/20231227103950/https://www.owasp.org/images/1/1c/OWASP-IoT-Top-10-2018-final.pdf
	* [2] https://metro.co.uk/2019/12/19/10-worst-passwords-2019-revealed-nothing-changed-11932281/		* [2] https://metro.co.uk/2019/12/19/10-worst-passwords-2019-revealed-nothing-changed-11932281/
	* [3] https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=de_AT		* [3] https://play.google.com/store/apps/details?id=com.google.android.apps.authenticator2&hl=de_AT

NKirnbauer: link that doesnt exist

2024-08-23T12:21:50Z

link that doesnt exist

← Older revision		Revision as of 12:21, 23 August 2024
Line 197:		Line 197:
	== Courses ==		== Courses ==

	* [[Workshops]] (2017, 2018, 2019, 2020)		* Workshops (2017, 2018, 2019, 2020)

	== References ==		== References ==

NKirnbauer: gendering

2024-08-23T10:57:16Z

gendering

← Older revision		Revision as of 10:57, 23 August 2024
Line 22:		Line 22:
	Such a value is now stored in the database. When the user logs in again, the password is hashed again and compared with the stored value in the database. If both values match, the user will be logged in. If not, the attempt fails.		Such a value is now stored in the database. When the user logs in again, the password is hashed again and compared with the stored value in the database. If both values match, the user will be logged in. If not, the attempt fails.

	If an attacker gains access to the database, he cannot do much with it at first. As with encryption, it is not possible to infer the password from a key. Only a guess is be possible. The attacker would have to know the password, hash it and then compare it. So only guessing is possible.		If an attacker gains access to the database, they cannot do much with it at first. As with encryption, it is not possible to infer the password from a key. Only a guess is be possible. The attacker would have to know the password, hash it and then compare it. So only guessing is possible.
	This is because cryptographic hash functions have the following important properties:		This is because cryptographic hash functions have the following important properties:
	*Each hash has the same length (40 characters), regardless of the length of the file or string.		*Each hash has the same length (40 characters), regardless of the length of the file or string.

EPelanovic at 23:47, 6 January 2023

2023-01-06T23:47:29Z

Show changes

MKorani at 16:05, 20 December 2021

2021-12-20T16:05:30Z

← Older revision		Revision as of 16:05, 20 December 2021
Line 12:		Line 12:

	=== Password Entropy and Quality ===		=== Password Entropy and Quality ===
	A lot of studies suggest to take '''Password Entropy''' to meassure the efficiency of a password. A higher entropy indicates a secure password, where less entropy indicates a less secure passwords. Entropy is the amount of information held in a password. The more ''information'' is in your ~~passwordy~~ the more time a hacker has to invest to crack the password.		A lot of studies suggest to take '''Password Entropy''' to meassure the efficiency of a password. A higher entropy indicates a secure password, where less entropy indicates a less secure passwords. Entropy is the amount of information held in a password. The more ''information'' is in your password the more time a hacker has to invest to crack the password. To get a higher entropy you should use more and different characters.

	Character Set 1: 26 lower case letters: abcdefghijklmnopqrstuvwxyz		Character Set 1: 26 lower case letters: abcdefghijklmnopqrstuvwxyz
Line 21:		Line 21:

	Character Set 4: 31 special characters: ~!@#$ %^&*()_-+= {}∣[] \:“<>?;',. /		Character Set 4: 31 special characters: ~!@#$ %^&*()_-+= {}∣[] \:“<>?;',. /

MKorani at 15:46, 20 December 2021

2021-12-20T15:46:21Z

← Older revision		Revision as of 15:46, 20 December 2021
Line 12:		Line 12:

	=== Password Entropy and Quality ===		=== Password Entropy and Quality ===
	A lot of studies suggest to take '''Password Entropy''' to meassure the efficiency of a password. A higher entropy indicates a secure password, where less entropy indicates a less secure passwords. Entropy is the amount of information held in a password. The more ''information''is in your passwordy the more time a hacker has to invest to crack the password.		A lot of studies suggest to take '''Password Entropy''' to meassure the efficiency of a password. A higher entropy indicates a secure password, where less entropy indicates a less secure passwords. Entropy is the amount of information held in a password. The more ''information'' is in your passwordy the more time a hacker has to invest to crack the password.

	Character Set 1: 26 lower case letters: abcdefghijklmnopqrstuvwxyz		Character Set 1: 26 lower case letters: abcdefghijklmnopqrstuvwxyz

MKorani at 15:45, 20 December 2021

2021-12-20T15:45:12Z

← Older revision		Revision as of 15:45, 20 December 2021
Line 13:		Line 13:
	=== Password Entropy and Quality ===		=== Password Entropy and Quality ===
	A lot of studies suggest to take '''Password Entropy''' to meassure the efficiency of a password. A higher entropy indicates a secure password, where less entropy indicates a less secure passwords. Entropy is the amount of information held in a password. The more ''information''is in your passwordy the more time a hacker has to invest to crack the password.		A lot of studies suggest to take '''Password Entropy''' to meassure the efficiency of a password. A higher entropy indicates a secure password, where less entropy indicates a less secure passwords. Entropy is the amount of information held in a password. The more ''information''is in your passwordy the more time a hacker has to invest to crack the password.

	Character Set 1: 26 lower case letters: abcdefghijklmnopqrstuvwxyz		Character Set 1: 26 lower case letters: abcdefghijklmnopqrstuvwxyz

MKorani at 15:44, 20 December 2021

2021-12-20T15:44:48Z

← Older revision		Revision as of 15:44, 20 December 2021
Line 9:		Line 9:
	=== Mistakes by choosing Passwords ===		=== Mistakes by choosing Passwords ===

	'''Personal information''' is used to create passwords which is a popular target for social engineering (names, dates, etc.). Often '''standard passwords''' like "123456" or "password" are used. Actually, "123456" has been the most used password for the last years [2]. The re-use of passwords is one of the main challenges: many users use the '''same password for various accounts'''. It should be obvious that it is not a good idea to use the same password for online banking and for an Adobe account. The quality of a password depends on how long a attacker needs to find the correct one.		'''Personal information''' is used to create passwords which is a popular target for social engineering (names, dates, etc.), due to the limitation of the capacity a human can remember. Often '''standard passwords''' like "123456" or "password" are used. Actually, "123456" has been the most used password for the last years [2]. The re-use of passwords is one of the main challenges: many users use the '''same password for various accounts'''. It should be obvious that it is not a good idea to use the same password for online banking and for an Adobe account. The quality of a password depends on how long a attacker needs to find the correct one.

	=== Password Entropy and Quality ===		=== Password Entropy and Quality ===
	A lot of studies suggest to take '''Password Entropy''' to meassure the efficiency of a password. A higher entropy indicates a secure password, where less entropy indicates a less secure passwords. ~~Higher~~ Entropy ~~means t use~~		A lot of studies suggest to take '''Password Entropy''' to meassure the efficiency of a password. A higher entropy indicates a secure password, where less entropy indicates a less secure passwords. Entropy is the amount of information held in a password. The more ''information''is in your passwordy the more time a hacker has to invest to crack the password.
			Character Set 1: 26 lower case letters: abcdefghijklmnopqrstuvwxyz

			Character Set 2: 26 upper case letters: ABCDEFGHIJKLMNOPQRSTUVWXYZ

			Character Set 3: 10 digit characters: 01234567890

			Character Set 4: 31 special characters: ~!@#$ %^&*()_-+= {}∣[] \:“<>?;',. /

MKorani at 15:32, 20 December 2021

2021-12-20T15:32:32Z

← Older revision		Revision as of 15:32, 20 December 2021
Line 7:		Line 7:
	There are several more or less widely known bad habits regarding passwords.		There are several more or less widely known bad habits regarding passwords.

	=== ~~The Password Quality~~ ===		=== Mistakes by choosing Passwords ===

	'''Personal information''' is used to create passwords which is a popular target for social engineering (names, dates, etc.). Often '''standard passwords''' like "123456" or "password" are used. Actually, "123456" has been the most used password for the last years [2]. The re-use of passwords is one of the main challenges: many users use the '''same password for various accounts'''. It should be obvious that it is not a good idea to use the same password for online banking and for an Adobe account. The quality of a password depends on how long a attacker needs to find the correct one.		'''Personal information''' is used to create passwords which is a popular target for social engineering (names, dates, etc.). Often '''standard passwords''' like "123456" or "password" are used. Actually, "123456" has been the most used password for the last years [2]. The re-use of passwords is one of the main challenges: many users use the '''same password for various accounts'''. It should be obvious that it is not a good idea to use the same password for online banking and for an Adobe account. The quality of a password depends on how long a attacker needs to find the correct one.

	=== Password Entropy ===		=== Password Entropy and Quality ===
	A lot of studies suggest to take '''Password Entropy''' to meassure the efficiency of a password. A higher entropy indicates a secure password, where less entropy indicates a less secure passwords. Higher Entropy means t use		A lot of studies suggest to take '''Password Entropy''' to meassure the efficiency of a password. A higher entropy indicates a secure password, where less entropy indicates a less secure passwords. Higher Entropy means t use

MKorani at 15:31, 20 December 2021

2021-12-20T15:31:26Z

← Older revision		Revision as of 15:31, 20 December 2021
Line 9:		Line 9:
	=== The Password Quality ===		=== The Password Quality ===

	'''Personal information''' is used to create passwords which is a popular target for social engineering (names, dates, etc.). Often '''standard passwords''' like "123456" or "password" are used. Actually, "123456" has been the most used password for the last years [2]. The re-use of passwords is one of the main challenges: many users use the '''same password for various accounts'''. It should be obvious that it is not a good idea to use the same password for online banking and for an Adobe account.		'''Personal information''' is used to create passwords which is a popular target for social engineering (names, dates, etc.). Often '''standard passwords''' like "123456" or "password" are used. Actually, "123456" has been the most used password for the last years [2]. The re-use of passwords is one of the main challenges: many users use the '''same password for various accounts'''. It should be obvious that it is not a good idea to use the same password for online banking and for an Adobe account. The quality of a password depends on how long a attacker needs to find the correct one.

	=== Password Entropy ===		=== Password Entropy ===
			A lot of studies suggest to take '''Password Entropy''' to meassure the efficiency of a password. A higher entropy indicates a secure password, where less entropy indicates a less secure passwords. Higher Entropy means t use