Author Topic: How secure is your password?  (Read 10786 times)

Considering my best friend and I have shared the same password for everything since we were like 5, not very secure at all.
How do I know I'm talking to you and not your friend??

I need to change all of mine lol, I takes a few seconds to crack.

i had an intense doubt that this site was accurate so it made me think of this:


this is how i made my motherkey



it is incredibly long, lol

http://i.imgur.com/N5084p6.jpg[/img]

Sure just click a link on a forum, letting them know where you came from via referral, then enter your password.  What could go wrong.  You guys are geniuses. 
not my blf account and my throwaway email lol

Worst case is still way lower than 4 billion.
You wouldn't just need a computer that generate 4bil passwords per second (Ipquarx claimed a high end GPU could do 300mil).
You'd also need a network connection to the victim server with enough bandwidth to handle  4 billion requests a second. (Which would be several terabits per second)
And the server would need to be able to process those 4 billion requests per second.
And that's disregarding the fact that you'd need to wait for each request to be sent, processed, and responded to, before knowing if you got the right password. You could use asynchronous calls to do more than one at once... But not several billion at a time
none of this makes the worst case any worse? what you're saying would just make it slower
I mean worst case from the perspective of the person using the password

You guys are handicapped

Do you realise you are entering your  password into a random site?
What prevents them from logging it all and selling it to a third party brute forcer?

This is litterally the easiest honeypot is everyone falling for this what
« Last Edit: March 04, 2016, 09:57:11 AM by Aide33 »

You guys are handicapped

Do you realise you are entering your  password into a random site?
What prevents them from logging it all and selling it to a third party brute forcer?

This is litterally the easiest honeypot is everyone falling for this what
the site can't collect any password data
i checked and there's no ajax or websocket shenanigans

Do you realise you are entering your  password into a random site?
What prevents them from logging it all and selling it to a third party brute forcer?
most people don't have the knowledge to figure it out, but the site isn't doing anything fishy
if you want, you can load the page then turn off your internet before entering any passwords

a nonillion years for my current longest password

or he can put on his tinfoil hat

What if this site stores your password in a mysql database




Sure just click a link on a forum, letting them know where you came from via referral, then enter your password.  What could go wrong.  You guys are geniuses. 
The paranoia has set in

Lets say it does save your password somehow. How does it know what my usernames are, or, what username for what site the password is for?

Lets say it does save your password somehow. How does it know what my usernames are, or, what username for what site the password is for?
and then let's say

does it access my phone to verify? because all of the IMPORTANT services use this