| On 10.07.09, In Uncategorized, by tilak |
The phishing scam of more than 30,000 emails address and password posted online, as seen by BBC and that Microsoft confirmed became dramatically worse when tens of thousands of names emerged containing more email addresses and passwords – and not only from Hotmail, but also from Yahoo, AOL, Gmail, Comcast, Earthlink and other service providers.
We have already informed you about the news by following posts:
1. Hotmail accounts under attack; Hotmail users advised to change passwords immediately
2. Not only Hotmail…Gmail, Yahoo, AOL and others too lined up in e-mail scam!
These news make every email users worried about thier mail accounts. In this regard, Gmail remind the mail users about choosing a smart password.
Help ensure you’re protecting your computer, website, and personal information by checking out our security series on the Google blog or visiting http://www.staysafeonline.org.
Let’s look what are those tips for Smart Password:
Use unique passwords: Many people simply use the same password across a variety of accounts. This is risky: if someone figures out your password for one service, that person could potentially gain access to your private email, address information, and even your money. It’s a good idea to use unique passwords for your every accounts. To make this word or phrase more secure, try making some letters uppercase, and swap out some letters with numbers or symbols.
Use a password with a mix of letters, numbers, and symbols: There are only 26^8 possible permutations for an 8-character password that uses just lowercase letters, while there are 94^8 possible permutations for an 8-character password that uses a combination of mixed-case letters, numbers, and symbols. That’s over 6 quadrillion more possible variations for a mixed password, which makes it that much harder for anyone to guess or crack.
Create a password that’s hard for others to guess: Choose a combination of letters, numbers, or symbols to create a unique password that’s unrelated to your personal information. Or, select a random word or phrase, and insert letters and numbers into the beginning, middle, and end to make it extra difficult to guess (such as “sPo0kyh@ll0w3En”).
Keep your password reminders in a secret place that isn’t easily visible: Don’t leave notes with your passwords to various sites on your computer or desk. People who walk by can easily steal this information and use it to compromise your account. Also, if you decide to save your passwords in a file on your computer, create a unique name for the file so people don’t know what’s inside. Avoid naming the file “my passwords” or something else obvious.
Make sure your password recovery options are up-to-date and secure: Many websites will ask you to choose a question to verify your identity if you ever forget your password. If you’re able to create your own question, try to come up with a question that has an answer only you would know. The answer shouldn’t be something that someone can guess by scanning information you’ve posted online in social networking profiles, blogs, and other places.
Keep an eye out for the phishing warning Gmail adds to suspicious messages, and be sure to review these tips on how to avoid getting hooked.
Have a safe and secure email accounts.















3 Responses
after reading the story on this attack, couldn’t get, what is the point of having smart password? whoever hacked the info, must have got access to the database (may be for little time only), so even if our password is smart enough for hackers to crack, it is still open for those who can get it through DB.
nyways the above reaction was instant considering the latest impact on mind. Your post is really helpful and something which every person should follow. Thanks for posting.
@Seolnra – about getting it from DB, even though password was compromised from the db, it depends on how it is stored. Most systems design to store with encryption so it is hard to break it. and ThumbRule: Password or such authentication answer should never never be stored in plain text. When it comes to encryption, it depends on what they choose to encrypt. SHA1 hash has been fairly better way unless there is something else that i haven’t heard of yet. there used to be MDA, DES which exposed vulnerability to crackopen / decrypt.
@tilak,
great post indicating the guidelines to pick the strong password. A word of caution to others however, although i notice it is not intentional of using an example above but to a general context – however, a word/phrase like “(such as “sPo0kyh@ll0w3En”)” turns out to be guess-able (seasonal) and use algorithms for permutations and combinations of that phrase SPOOKYHALLOWEEN; similarly other guess-able words/phrases such as SnowyChristmas, that people need to be cautious while creating their passwords…
Thanks both of you for the valuable comments.