Skip to main content

Avoid this easy email scam!


Produced By: Yahoo tech
Wed Sep 3, 2008 11:31AM EDT


Never mind creating a password with at least eight characters, two of which are numbers, one of which is a capital letter, and one of which is a symbol like (*&^%$). The easiest way for a hacker to weasel into your account is likely the "Forgot your password?" link.

"Forgot your password?" features are older than the Internet, providing businesses and site owners a simple way to let a user reset a forgotten password, provided he can verify his credentials by asking a few personal questions that only the rightful user should know.

For years the archetypical question was, of course, the "Mother's maiden name" challenge. In recent years, additional challenges have emerged, such as asking the street you grew up on, your favorite pet, and grandparents' first names.

Is all of this stuff really secure? More than one researcher is sounding the alarm over these tools, noting that while this data may have been private a decade ago, in an era of personal blogs, online resumes, and rampant social networking services, "personal" information drawn from your past is now widely available for public consumption. According to a researcher at PARC, you can even buy black market directories of personal information "like dog's names," for about $15 per batch. It's certainly a lot easier than guessing passwords like AHFplug41*.

Think this doesn't happen? There aren't any statistics available, but these hacks are widely suspected in myriad cases where accounts have been compromised. (Even Paris Hilton is said to have fallen prey to the "what is your dog's name?" password reset hack. It doesn't help to have one of the most infamous dogs in America...) But if you need more proof, check out this "how I did it" step by step guide to hacking a password from one writer at Scientific American. In about an hour, it seems, our researcher managed to compromise one (willing) victim's life entirely through password reset links.

MSNBC has an exhaustive amount of additional information on the issue, but the takeaway is clear: If you provide information for password reset systems, don't use data (like other people's names and addresses) that can be easily discovered or guessed. Better yet, consider creating a second tier of passwords you use for questions like these, and keep them written down and locked in a safe if you must. In other words: Your mother's maiden name may really be Jones, but that you can't pretend it wasn't Mxlpxlxl!7631.

Comments

Popular posts from this blog

The Olympic Diet of Michael Phelps!

By Kathleen M. Zelman, MPH, RD, LD WebMD Health News Questions and answers about the high-calorie diet that fuels the Olympic swimmer's championship performance. Aug. 13, 2008 -- His body may resemble the trim, athletic figure of Michelangelo's statue of David, but the diet of Michael Phelps sure doesn't sound like the stuff of champions. The U.S. Olympic swimmer told ESPN that he eats roughly 8,000-10,000 calories a day, including "lots of pizza and pasta." In addition to stuffing down carbs, he's said that he routinely eats foods like fried egg sandwiches. So exactly how do all those calories help fuel the most decorated Olympic athlete in history? Here are some questions and answers about the Michael Phelps diet. How can Michael Phelps eat 10,000 calories a day and still be so lean? There is no doubt he packs away a ton of food, but it is unlikely that he actually eats that many calories a day, an expert believes. University of Pittsburgh Director of Sports...

How to Stay Fit and Healthy

You did it! You met your fitness goal! Now that you have achieved some of your health-related goals, you'll need to focus on  staying  in shape and maintaining a healthy diet. You may have changed a lot of things about what you eat, your lifestyle, and/or your exercise routine. Sometimes keeping up with all the great changes you've made to be more fit or healthy can be daunting. Many people have difficulty maintaining these changes long-term. It can make you feel overwhelmed or get tired or bored with the lifestyle you've developed. But there are a lot of ways that you can stay motivated and keep up with your healthy lifestyle. 1 Touch base your doctor and registered dietitian.  When you are changing your focus from losing weight or meeting a certain goal to maintaining the healthy body you have fought hard to achieve, your dietary needs may change, too. Before becoming fit and healthy you likely met with your doctor and/or a dietitian, and now would be a good t...

How to Tell if Someone Is Being Sarcastic

1. Most of the time, people will change the tone of their voice when they are being sarcastic. 2. Listen for a flat, uncaring tone, or an overly-emotional tone. 3. Try looking for extra emphasis on one or two words, like the word "The" can be said like the, or with the E sound at the end. 4. Watch for these words; like, well, the, and, sure, etc. Someone may say the word longer than they would normally in a normal conversation. 5. Try listening for words like, "yeah, uh-huh, sure," and, "as if." 6. If whatever they're saying sounds outrageous, they may be sarcastic. 7. If none of these steps work, then you are dealing with a master of sarcasm. Take whatever they say with a grain of salt. 8. Look out on the internet as well. People who are being sarcastic on the internet (could be considered trolling) are usually clearly sarcastic. Always look for stupidity in others' posts.