Thursday, May 31, 2012
Violet vs Polt
TSL.Polt(T) v Empire.Violet(Z) - Tal'Darim Altar - 5.30.2012cast by Ipp of RageQuitTV
Nice long game.
More D3 Account Security
I am still following Diablo 3 accounts getting hacked.
See this useful post on Bnet http://us.battle.net/d3/en/forum/topic/5271503297
Some other tidbits:
Don't use a password that can be found on a list like these (warning some Mature language):
See this useful post on Bnet http://us.battle.net/d3/en/forum/topic/5271503297
Some other tidbits:
- You can get phished from friends Twitter messages, see http://isc.sans.edu/diary.html?storyid=13330
- don't use same password on more than one site
- use at least one number and one symbol (ie "#$%")[should use upper and lower case letters but Blizz may ignore that]
- longer is better ^_^ But not if it is words or something from Hackers dictionary (ie 123456789)
- don't put number or symbol at beginning or end of password, that is what most people do, and password hacking software takes advantage of that
- Dictionary words for passwords =/= OED or Websters Dictionary; rather it means a Hackers dictionary! See below.
Don't use a password that can be found on a list like these (warning some Mature language):
- http://www.zdnet.com/blog/btl/26000-email-addresses-and-passwords-leaked-check-this-list-to-see-if-youre-included/50424
- http://www.troyhunt.com/2011/06/brief-sony-password-analysis.html
- http://www.imperva.com/docs/WP_Consumer_Password_Worst_Practices.pdf
- http://www.zdnet.com/blog/hardware/repeat-after-me-reusing-passwords-is-bad/10684
- http://blog.jimmyr.com/Password_analysis_of_databases_that_were_hacked_28_2009.php
Wednesday, May 30, 2012
Thundertoss Top 200 KOTH Replay pack update
Ascend just updated the replay packs from Top 200, you can find them here http://ascendtv.com/top200koth/replays.php
A lot of really good top level games, useful for study or casting.
A lot of really good top level games, useful for study or casting.
Tuesday, May 29, 2012
Steve Gibson's Haystacks & Needles (Understanding Passwords)
I am a big fan of Steve Gibson, if your a computer Nerd you probably know who he is, if not let's just say he knows Computers & Computer Security better than anyone your likely to meet.
He is also an excellent communicator, he is one of the best people I know, for taking a complex & arcane topic and explaining it so anyone can understand it.
I strongly recommend reading his article on Passwords at https://www.grc.com/haystack.htm
There are many important components to good passwords, and I suggest reading his article, but if your not going to, I would say the 2 key points to a strong enough password for most of us are the following.
First, Password Length, size matters!
[Thinking of it that way will ensure you remember that important fact.]
Longer is better!!
Second, use a specific minimum complexity, in Steve Gibson's own words [types of characters: Lower case letters, upper case letters, numbers, and symbols ie "@<>$&*"]:
Links & Info
Steve Gibson's Password Podcast:
Steve's Little Corner http://www.grc.com/stevegibson.htm
Steve's Twitter http://twitter.com/SGgrc
Steve's Blog https://www.grc.com/news.htm
He is also an excellent communicator, he is one of the best people I know, for taking a complex & arcane topic and explaining it so anyone can understand it.
I strongly recommend reading his article on Passwords at https://www.grc.com/haystack.htm
There are many important components to good passwords, and I suggest reading his article, but if your not going to, I would say the 2 key points to a strong enough password for most of us are the following.
First, Password Length, size matters!
[Thinking of it that way will ensure you remember that important fact.]
Longer is better!!
Second, use a specific minimum complexity, in Steve Gibson's own words [types of characters: Lower case letters, upper case letters, numbers, and symbols ie "@<>$&*"]:
"The use of every type of character forces the attacker to search through the largest possible space. We must always assume that an attacker is as smart as possible (and most are). So, knowing that 41.69% of all passwords consist of only lowercase alphabetic characters, a smart attacker who is forced to resort to a brute force search won't initially bother spending time guessing passwords that contain uppercase, digits and symbols. Only after an all lowercase search out to some length has failed will an attacker decide that the unknown target password must contain additional types of characters.
So, in essence, by deliberately using at least one of each type of character, we are forcing the attacker to search the largest possible password space, because our password won't ever be found in any of the smaller spaces."
Links & Info
Steve Gibson's Password Podcast:
- (Standard Audio 17.9 MB) http://media.grc.com/Padded-Passwords.mp3
- (Lower Quality Audio 4.47 MB) http://media.grc.com/Padded-Passwords-lq.mp3
Steve's Little Corner http://www.grc.com/stevegibson.htm
Steve's Twitter http://twitter.com/SGgrc
Steve's Blog https://www.grc.com/news.htm
HwangSin Streaming
http://www.own3d.tv/itsgosu/live/276078
HwangSin switched to Own3d and I wasn't following him there! My bad, got that fixed now, was wondering why I hadn't seen him stream for so long.
Much better now :)
HwangSin switched to Own3d and I wasn't following him there! My bad, got that fixed now, was wondering why I hadn't seen him stream for so long.
Much better now :)
Computer Security: "The Rules Of Computing"
An excellent article, titled "The Rules of Computing" from a Computer Security blog I follow, it is Mac focused, but the information, aside from Mac specific software, applies to all computers, including Smart Phones!
A lot of people don't realize that smart phones are computers, with additional vulnerabilities added, and that it takes a certainly baseline skillset to operate them without undue security risks.
Especially with the Android platform, since it is less tied down, and far more open, much like computers.
I wonder if there may be a real job opportunity for Nerds to get into Android Security?
Stay Safe,
Cliff
A lot of people don't realize that smart phones are computers, with additional vulnerabilities added, and that it takes a certainly baseline skillset to operate them without undue security risks.
Especially with the Android platform, since it is less tied down, and far more open, much like computers.
I wonder if there may be a real job opportunity for Nerds to get into Android Security?
Stay Safe,
Cliff
Monday, May 28, 2012
Sunday, May 27, 2012
Subscribe to:
Posts (Atom)