Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

"Password" and "1234567" Still Favorite Passwords - And For Good REASONS

10 views
Skip to first unread message

166p1

unread,
Nov 18, 2021, 12:52:12 AM11/18/21
to
https://www.dailymail.co.uk/sciencetech/article-10209349/Passwords-123456-password-popular.html

Will we EVER learn? '123456' and 'password' are still among the
most popular passwords in the world – while many users continue
to use their own name, report reveals

The annual NordPass Most Common Passwords report revealed common
trends. It found that people are still using very simple and easy
to guess passwords including '123456', 'password' and 'qwerty'
which can be cracked in a second. There were local and gender
differences including sports teams as passwords.

. . . .

SysAdmin ??? Well THIS is what you're up against - and
it's NOT going to change.

Users would rather live with unknown risks than suffer
with passwords and other procedures that are impossible
to remember or a pain to cope with. They WILL find a
way around difficult edicts - or they'll quit and take
all their job experience with them.

But, when it goes bad, the SysAdmins get the blame.

Look, cybercommerce/cyberbanking SOUNDED great. But
people are NOT going to cope with "dffNs%h##fj3d7xuz"
passwords plus text-messages on smartphones they may
not even own plus biometrics that won't recognize
you if you grew a beard or cut your thumb or dropped
20 pounds plus inscruitable captchas. And WHY don't
you know the name of your maiden aunts 3rd cousin's
favorite pet gerbil ???!!!

Nobody is going to put up with such shit.

Sorry, but "convenient" was one of the main drives
behind online commerce/banking. Now they feel they
have to make it as INconvenient as possible just to
stay half a step ahead of cyberCRIME. This is NOT
working out.

I'll tell you the solution ... and you won't like it ...
physically go TO your bank and do business with bits
of PAPER in front of people there who KNOW your face.
SHOP online, but print the order form, fill it out
in ink, and physically MAIL it to the seller. Might
not hurt to include a PAPER *CHECK* inside to cover
the purchase - again something tangible, something
they'll at least have to scan. Use a Sharpie pen
to write the check too - something that can't be
washed out.

Oh, and you can go to physical STORES ... they have
all kinds of interesting things on big rows of
shelves ... and there's a thing called "cash" you
can use to buy those fascinating items.

This 1950-ish approach WILL thwart crime. Because
of human nature, NOTHING will thwart it using
todays methods. 'Convenient' for you ? PARADISE
for the cybercriminals and cyberterrorists.

This is the horrible bitter Truth, and you KNOW it.

SysAdmin ? Contract ? Slip "NOT responsible for events
resulting from users employing poor passwords/technique"
in there. If they won't accept that - QUIT - you'll be
saving yourself endless trouble. Put them on the blacklist
at all the job-search sites.

The Natural Philosopher

unread,
Nov 18, 2021, 3:03:55 AM11/18/21
to
On 18/11/2021 05:52, 166p1 wrote:
> Oh, and you can go to physical STORES ... they have
> all kinds of interesting things on big rows of
> shelves ... and there's a thing called "cash" you
> can use to buy those fascinating items.
>
> This 1950-ish approach WILL thwart crime. Because
> of human nature, NOTHING will thwart it using
> todays methods. 'Convenient' for you ? PARADISE
> for the cybercriminals and cyberterrorists.

Carry cash around? and get short changed and get mugged, like we did in
the 1950s? Not to mention te retailer denying the transaction ever took
place as there is no record of it? no thanks!

It's easier to dream up passwords that are instantly memorable to you,
but unguessable by anyone else....

GimmeMyDollar$ok!

--
When plunder becomes a way of life for a group of men in a society, over
the course of time they create for themselves a legal system that
authorizes it and a moral code that glorifies it.

Frédéric Bastiat

Richard Kettlewell

unread,
Nov 18, 2021, 4:17:36 AM11/18/21
to
166p1 <z24ba6.net> writes:

> https://www.dailymail.co.uk/sciencetech/article-10209349/Passwords-123456-password-popular.html
>
> Will we EVER learn? '123456' and 'password' are still among the
> most popular passwords in the world – while many users continue
> to use their own name, report reveals
[...]
> But, when it goes bad, the SysAdmins get the blame.

Websites should certainly be rejecting well-known passwords.

> Look, cybercommerce/cyberbanking SOUNDED great. But
> people are NOT going to cope with "dffNs%h##fj3d7xuz"
> passwords plus text-messages on smartphones they may
> not even own plus biometrics that won't recognize
> you if you grew a beard or cut your thumb or dropped
> 20 pounds plus inscruitable captchas. And WHY don't
> you know the name of your maiden aunts 3rd cousin's
> favorite pet gerbil ???!!!
>
> Nobody is going to put up with such shit.
>
> Sorry, but "convenient" was one of the main drives
> behind online commerce/banking. Now they feel they
> have to make it as INconvenient as possible just to
> stay half a step ahead of cyberCRIME. This is NOT
> working out.
>
> I'll tell you the solution ...

Use a password manager.

--
https://www.greenend.org.uk/rjk/

The Natural Philosopher

unread,
Nov 18, 2021, 4:39:09 AM11/18/21
to
On 18/11/2021 09:17, Richard Kettlewell wrote:
>> I'll tell you the solution ...
> Use a password manager.

indeed.

I have passwords for so many odd accounts - now mostly I let firefox
handle the ones that don't involve money.

But a password manger handles the 'once a year' usage ones.
I cant remember what I typed in to woolly-jumpers.com 18 months ago...


--
Gun Control: The law that ensures that only criminals have guns.

Ant

unread,
Nov 18, 2021, 5:11:36 AM11/18/21
to
People don't care. It will be forever. :(

In comp.os.linux.misc 166p1 <z24ba6.net> wrote:
> https://www.dailymail.co.uk/sciencetech/article-10209349/Passwords-123456-password-popular.html

> Will we EVER learn? '123456' and 'password' are still among the
> most popular passwords in the world ??? while many users continue
--
Is summer finally over? Weather, buggy and slammy life are so crazy! Being old sucks. :(
Note: A fixed width font (Courier, Monospace, etc.) is required to see this signature correctly.
/\___/\ Ant(Dude) @ http://aqfl.net & http://antfarm.home.dhs.org.
/ /\ /\ \ Please nuke ANT if replying by e-mail.
| |o o| |
\ _ /
( )

Bobbie Sellers

unread,
Nov 18, 2021, 10:51:21 AM11/18/21
to
On 11/17/21 21:52, 166p1 wrote:
> https://www.dailymail.co.uk/sciencetech/article-10209349/Passwords-123456-password-popular.html
>
>
> Will we EVER learn? '123456' and 'password' are still among the
> most popular passwords in the world – while many users continue
> to use their own name, report reveals
>
> The annual NordPass Most Common Passwords report revealed common
> trends.  It found that people are still using very simple and easy
> to guess passwords including '123456', 'password' and 'qwerty'
> which can be cracked in a second. There were local and gender
> differences including sports teams as passwords.

Well this password choice needs to be a relegated to a password
generator which Prints the Password on the screen with instruction to
all applicants and tell them to write it down, reenter it to be sure
that they have it and then all sign on again for access. It will
have to be a uniform requirement across all platforms, Then the
usual security questions in case a notebook is lost.

Just my humble User's opinion.

bliss -bliss - brought to you by the power and ease of PCLinuxOS
and a minor case of hypergraphia
--
bliss dash SF 4 ever at dslextreme dot com

Andreas Kohlbach

unread,
Nov 18, 2021, 12:03:21 PM11/18/21
to
On Thu, 18 Nov 2021 00:52:03 -0500, 166p1 <z24ba6.net> wrote:
>
> https://www.dailymail.co.uk/sciencetech/article-10209349/Passwords-123456-password-popular.html
>
> Will we EVER learn? '123456' and 'password' are still among the
> most popular passwords in the world – while many users continue
> to use their own name, report reveals

"They" wont ever learn. My bet is that 123456 is still people's favorite
password in 2030.
--
Andreas

https://news-commentaries.blogspot.com/

The Natural Philosopher

unread,
Nov 18, 2021, 1:04:03 PM11/18/21
to
On 18/11/2021 17:03, Andreas Kohlbach wrote:
> On Thu, 18 Nov 2021 00:52:03 -0500, 166p1 <z24ba6.net> wrote:
>>
>> https://www.dailymail.co.uk/sciencetech/article-10209349/Passwords-123456-password-popular.html
>>
>> Will we EVER learn? '123456' and 'password' are still among the
>> most popular passwords in the world – while many users continue
>> to use their own name, report reveals
>
> "They" wont ever learn. My bet is that 123456 is still people's favorite
> password in 2030.
>
You think people will still be able to count in 2030?


--
Truth welcomes investigation because truth knows investigation will lead
to converts. It is deception that uses all the other techniques.

Marco Moock

unread,
Nov 18, 2021, 2:13:46 PM11/18/21
to
Am Thu, 18 Nov 2021 00:52:03 -0500
schrieb 166p1 <z24ba6.net>:

> Will we EVER learn? '123456' and 'password' are still among the
> most popular passwords in the world – while many users continue
> to use their own name, report reveals
No, people will not learn that. They also don't care about it.
If their accounts get hacked, they will be disabled and they can't use
the service anymore. This is the only way they learn that.

Andreas Kohlbach

unread,
Nov 18, 2021, 8:52:47 PM11/18/21
to
On Thu, 18 Nov 2021 18:03:59 +0000, The Natural Philosopher wrote:
>
> On 18/11/2021 17:03, Andreas Kohlbach wrote:
>
>> "They" wont ever learn. My bet is that 123456 is still people's
>> favorite
>> password in 2030.
>>
> You think people will still be able to count in 2030?

Do they today?

But I was about to add "...if mankind still exists in 2030".
--
Andreas

https://news-commentaries.blogspot.com/

Charlie Gibbs

unread,
Nov 18, 2021, 10:11:14 PM11/18/21
to
On 2021-11-18, The Natural Philosopher <t...@invalid.invalid> wrote:

> On 18/11/2021 17:03, Andreas Kohlbach wrote:
>
>> On Thu, 18 Nov 2021 00:52:03 -0500, 166p1 <z24ba6.net> wrote:
>>>
>>> https://www.dailymail.co.uk/sciencetech/article-10209349/Passwords-123456-password-popular.html
>>>
>>> Will we EVER learn? '123456' and 'password' are still among the
>>> most popular passwords in the world – while many users continue
>>> to use their own name, report reveals
>>
>> "They" wont ever learn. My bet is that 123456 is still people's favorite
>> password in 2030.
>
> You think people will still be able to count in 2030?

"There's an app for that."

--
/~\ Charlie Gibbs | Microsoft is a dictatorship.
\ / <cgi...@kltpzyxm.invalid> | Apple is a cult.
X I'm really at ac.dekanfrus | Linux is anarchy.
/ \ if you read it the right way. | Pick your poison.

166p1

unread,
Nov 18, 2021, 10:39:13 PM11/18/21
to
On 11/18/21 9:46 PM, Steve Hayes wrote:
> On Thu, 18 Nov 2021 09:39:04 +0000, The Natural Philosopher
> <t...@invalid.invalid> wrote:
>
>> I have passwords for so many odd accounts - now mostly I let firefox
>> handle the ones that don't involve money.
>
> Ditto.
>
>> But a password manger handles the 'once a year' usage ones.
>> I cant remember what I typed in to woolly-jumpers.com 18 months ago...
>
> I use a password-protected database program to record all passwords.
> No doubt if someone stole my computer they could eventually crack it,
> but I doubt rhar even one in a hundred computer thieves would bother
> to do that. They'd either use it or flog it.
>
> And when asked for a password on a site I pick up the nearest book,
> pick a word from the title, or a random word from a random page, add a
> couple of non-alphanumeric characters, and put that in my database.

They don't have to crack it really - they just have to
pretend to be you - open the thing and read the plaintext
entries. There are also person-in-the-middle approaches
as the manager effectively types the real PW to the
online form which may, or may NOT, be real.

So, don't count on a gimmick to solve The Problem here.

Oh, and if yer box crashes, how do YOU remember the
obscure passwords ? Got 'em written down somewhere -
oh wait, nobody "writes" anymore ... they're in
a word-processing file somewhere, aren't they ?

166p1

unread,
Nov 18, 2021, 10:58:05 PM11/18/21
to
On 11/18/21 10:51 AM, Bobbie Sellers wrote:
> On 11/17/21 21:52, 166p1 wrote:
>> https://www.dailymail.co.uk/sciencetech/article-10209349/Passwords-123456-password-popular.html
>>
>>
>> Will we EVER learn? '123456' and 'password' are still among the
>> most popular passwords in the world – while many users continue
>> to use their own name, report reveals
>>
>> The annual NordPass Most Common Passwords report revealed common
>> trends.  It found that people are still using very simple and easy
>> to guess passwords including '123456', 'password' and 'qwerty'
>> which can be cracked in a second. There were local and gender
>> differences including sports teams as passwords.
>
>     Well this password choice needs to be a relegated to a password
> generator which Prints the Password on the screen with instruction to
> all applicants and tell them to write it down, reenter it to be sure
> that they have it and then all sign on again for access.  It will
> have to be a uniform requirement across all platforms,  Then the
> usual security questions in case a notebook is lost.

Check online about how to tweak PAM so it will
accept a period as a password. There are probably
handy scripts. Laziness always finds a way to win.

And corporations - make it too much of a pain and
everybody does business elsewhere. I've even just
about had it with Amazon - but I do keep track of
who THEY buy from ... and sometimes the price is
even better if you buy direct.

You want 'convenience' the way an anti-vaxxer wants
to pretend Covid is a hoax - or that some gimmick
pill will save them (there MAY be a couple NOW,
but there are also serious concerns about genetic
damage because of the way they work).

Face it, if giant corporations, federal agencies,
major utilities and even your local hospital can
be hacked - YOU can be hacked. Can be a simple
as a fake login page for your bank to keyloggers
to man (person?)-in-the-middle action. And when
you made those passwords, did you put them into
a word-processing doc on your box ??? Mine are
ON PAPER, you remember paper, right ?

166p1

unread,
Nov 18, 2021, 11:41:20 PM11/18/21
to
Probably not even then.

Amazon UK has announced that it will no longer be
accepting VISA starting Jan 1 because the transaction
fee VISA charges is too high. But WHY is it too high ?
Because their banks are super-greedy ? Not quite. It's
because SO many people get their numbers STOLEN and
the banks at least have to do a fair job of pretending
you're not scammin' when you say YOU didn't buy 'X'.
The transaction fee is really a fraud-recovery fee.
And less VISA use just means the others will get scammed
all the more and THEIR fees will become impossible to
ignore .......

Credit cards, phone and online orders, all started in
a different social environment - where people WERE
more honest and you didn't have to worry about
Romanian hackers.

Oh, Amazon UK *will* keep accepting VISA *debit cards*.
Why ? Because the rules on recovering ripped-off money
are a LOT more restrictive for debit cards. Basically
the banks can say "Sorry Sucker - now Fuck Off".
Never keep more in one of those accounts than you're
willing to lose - and DO disconnect that account from
any others you have. Actually, disconnect ALL accounts
from each other, no "overdraft protection" either where
they steal from account 'B' to pay for account 'A'.

A few banks USED to offer a funky service that would
give you a fake CC number - good for an amount, and
time range, you specified. At least at the time the
hackers weren't into THAT service. Maybe it's time
to revive something like that. But how will they
keep out the hackers NOW that all their servers are
conveniently, cheaply, remotely managed with SolarWinds
or equivalent ?

My favorite hack story had to do with Target stores.
The hacks didn't bother to breech the company database,
they hacked the little terminals at the counter people
stuck their cards into .....

Cash money at the Wal-Mart - still the safest way.
Now if we can just get them to accept gold ... :-)

Hmm ... there ARE x-ray based scanners - hand-held -
that can give you an elemental/percentage readout
in about a second for any alloy. With that, paying
in gold and silver really COULD make a comeback ...

Oh well, anyway ... I think I've brought up a valid issue
for the modern world. Hyper-security is needed - but it's
SUCH a pain in the ass that people won't put up with it
and gimmicks will only get you just so far, just so much
protection, just so much convenience. We need a whole
new thing - or a very old thing - and I don't SEE it.

Richard Kettlewell

unread,
Nov 19, 2021, 3:29:11 AM11/19/21
to
166p1 <z24ba6.net> writes:
> Oh, and if yer box crashes, how do YOU remember the
> obscure passwords ?

Restore from backups.

--
https://www.greenend.org.uk/rjk/

The Natural Philosopher

unread,
Nov 19, 2021, 4:00:49 AM11/19/21
to
On 19/11/2021 01:52, Andreas Kohlbach wrote:
> On Thu, 18 Nov 2021 18:03:59 +0000, The Natural Philosopher wrote:
>>
>> On 18/11/2021 17:03, Andreas Kohlbach wrote:
>>
>>> "They" wont ever learn. My bet is that 123456 is still people's
>>> favorite
>>> password in 2030.
>>>
>> You think people will still be able to count in 2030?
>
> Do they today?
>
> But I was about to add "...if mankind still exists in 2030".
>
There is a reason why some people are called 'dumb fucks'

Intelligence is not always a survival asset.

The Natural Philosopher

unread,
Nov 19, 2021, 4:04:27 AM11/19/21
to
On 19/11/2021 02:46, Steve Hayes wrote:
> And when asked for a password on a site I pick up the nearest book,
> pick a word from the title, or a random word from a random page, add a
> couple of non-alphanumeric characters, and put that in my database.

I used to use either old car registration numbers - random 7 character
alphanumerics - or look out of the window and use the first thing I saw.
'red.bus' or 'hot!chick' and so on.

Its not getting so complicated that i need a password manager because
there are often two passwords - an initial one and a memorable word.

The Natural Philosopher

unread,
Nov 19, 2021, 4:05:17 AM11/19/21
to
On 19/11/2021 08:29, Richard Kettlewell wrote:
> 166p1 <z24ba6.net> writes:
>> Oh, and if yer box crashes, how do YOU remember the
>> obscure passwords ?
>
> Restore from backups.
>
+1


--
“when things get difficult you just have to lie”

― Jean Claud Jüncker

pH

unread,
Nov 21, 2021, 6:33:30 PM11/21/21
to
<snip>
Actually, writing checks and mailing them, using cash...that's
pretty much how I run my life.
Small knick-knacks on line, but no major shopping that way.

pH in Aptos

166p1

unread,
Nov 28, 2021, 2:02:02 AM11/28/21
to
On 11/18/21 10:11 PM, Charlie Gibbs wrote:
> On 2021-11-18, The Natural Philosopher <t...@invalid.invalid> wrote:
>
>> On 18/11/2021 17:03, Andreas Kohlbach wrote:
>>
>>> On Thu, 18 Nov 2021 00:52:03 -0500, 166p1 <z24ba6.net> wrote:
>>>>
>>>> https://www.dailymail.co.uk/sciencetech/article-10209349/Passwords-123456-password-popular.html
>>>>
>>>> Will we EVER learn? '123456' and 'password' are still among the
>>>> most popular passwords in the world – while many users continue
>>>> to use their own name, report reveals
>>>
>>> "They" wont ever learn. My bet is that 123456 is still people's favorite
>>> password in 2030.
>>
>> You think people will still be able to count in 2030?
>
> "There's an app for that."

And there's some truth in that cynicism ...

pH

unread,
Dec 3, 2021, 12:32:42 PM12/3/21
to
On 2021-12-03, Iterator Revamps <it...@domain.invalid> wrote:
> On Sun, 21 Nov 2021 23:33:21 +0000, pH wrote:
>
>> Actually, writing checks and mailing them, using cash...that's pretty
>> much how I run my life.
>> Small knick-knacks on line, but no major shopping that way.
>
> "Checks"? How quaint. I use IOU's!
>

Another excellent choice! Everything else is worth the paper it's written
on.

pH

Christopher Conforti

unread,
Feb 18, 2022, 11:32:52 PM2/18/22
to
On Thu, 18 Nov 2021 08:03:51 +0000, The Natural Philosopher wrote:

> Not to mention te retailer denying the transaction ever took place as
> there is no record of it? no thanks!

Isn't that a good thing? Because then I also have a better chance at
denying the transaction ever took place if LEOs come snooping. Far as
they know, it teleported into my garage.

25.BX943

unread,
Feb 19, 2022, 12:02:29 AM2/19/22
to
Shhhhh ! Without a paper economy we - indeed most of
the world - have no economy at all ! The illusion
MUST be maintained.

How many chickens can you deliver to pay for a pig ?
0 new messages