Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Congressman's phone password is 111111

gfycat.com

Post reply on HN
Print view View original

101–110 of 206 posts

Re: Congressman's phone password is 111111

#101

Post by pjc50 »

emilfihlman wrote: post #88
slg wrote: post #78

And yesterday over a dozen members of Congress barged into one of the Congressional versions of this site without authorization and while recording video, audio, and taking photos on their personal smartphones. Here is a Twitter thread about why that is such a problem: https://twitter.com/MiekeEoyang/status/1187032800572125191

[flagged]

It's appropriate to blame Republicans if it's actually their fault and they are actually trying to disrupt the impeachment process. Or do we suddenly not care about the security rules now it's not "her emails"?

Re: Congressman's phone password is 111111

#102

Post by barneygumble742 »

abstractbeliefs wrote: post #32
wayneftw wrote: post #25

I don't lock my phone at all. Never have. However, with the new iPhones that don't have a home button, I believe that Apple is forcing you to either use face unlock or a passcode. There is no choice to just leave it unlocked. So, as soon as my iPhone 6s stops working, I will have to choose to: 1) Give in and use my face to unlock. 2) Use a dumb passcode like 000000. 3) Upgrade to the newest iPhone that still has a ho…

Why is it that you choose not to? I think it would be helpful to understand your use case and how you balance your personal tolerance for risk and consequences so we can better consider users like yourself.

My phone never leaves my sight. I don't do mobile banking of any kind. I can sign out/remotely wipe the device via the web. It would be nice to remotely turn ON the GPS to find my phone but Android has since removed the remote GPS ON feature.

If only I can find a smartphone for talk/text/web/GPS, I'd be switch in a heartbeat. I'm seriously getting sick of the all the security features that tend to bloat the device and slow it to a crawl.

That being said, if my phone was vulnerable to theft or I wasn't so careful, I would lock my screen.

Re: Congressman's phone password is 111111

#103

Post by damq »

philshem wrote: post #65
manigandham wrote: post #57

Isn’t the real problem here that this was caught on video? Otherwise it’s just as secure as any other code.

If you obtained this phone without seeing the video, a singular oil smudge on the number 1 surely gives it away.

This would imply the only thing he uses his phone for is to type in his passcode.

Re: Congressman's phone password is 111111

#104

Post by duxup »

emilfihlman wrote: post #88
slg wrote: post #78

And yesterday over a dozen members of Congress barged into one of the Congressional versions of this site without authorization and while recording video, audio, and taking photos on their personal smartphones. Here is a Twitter thread about why that is such a problem: https://twitter.com/MiekeEoyang/status/1187032800572125191

[flagged]

The potential consequences of breaching security don't change because of someone's politics.

They are adults, they know the rules, they chose to bring their phones.

Re: Congressman's phone password is 111111

#105

Post by PhasmaFelis »

emilfihlman wrote: post #88
slg wrote: post #78

And yesterday over a dozen members of Congress barged into one of the Congressional versions of this site without authorization and while recording video, audio, and taking photos on their personal smartphones. Here is a Twitter thread about why that is such a problem: https://twitter.com/MiekeEoyang/status/1187032800572125191

[flagged]

> (in the end, you just pay and form another site like it, it's not like we can't make new ones).

Just imagine the fury if a Democrat compromised a secure site and then said "It's cool, just make a new one."

Re: Congressman's phone password is 111111

#106

Post by Maximus9000 »

diafygi wrote: post #43

I wonder what AI tech is being developed around detecting pin code entry on phones using passive CCTV networks. If you process the feeds for public transit security cameras, I wouldn't be surprised if you can read the pin codes for a huge swath of the population. It would also reduce the need for law enforcement to try to get a suspect to tell them their passcode. Just look up that time they rode the subway 3 weeks a…

I often notice this at gas pumps. There are always cameras at gas pumps. If you pay at the pump, then you enter your pin. I shield mine very carefully, but I watch other people and they just punch in their pin without shielding. It's weird because people often shield their pin at a checkout counter because the clerk is right there (sort of) watching. Maybe these people feel at gas pumps, no one is watching... but the CCTV definitely is watching.

Re: Congressman's phone password is 111111

#107

Post by swozey »

dwild wrote: post #93
swozey wrote: post #79

Earlier quoted context omitted.

When I was a kid my house was "broken into" but because the door was unlocked the police couldn't qualify it as breaking and entering. It was merely trespassing and my neighbor who did it got off. I was 12, these details may be a bit fuzzy. I chased the guy off so nothing was taken, he just walked in, saw me running to the door and ran back out. Supposedly he was just drunk and wandered into the wrong house anyway. I…

> Supposedly he was just drunk and wandered into the wrong house anyway. That's what made him fine, not the fact that you didn't lock. That's a thing that quite misunderstood, but for a crime to be committed, you need criminal intent. If you just made a mistake and weren't aware it wasn't your house, it's not a crime to enter it.

You're likely right and it was just my parents and police scaring me into keeping the doors locked. He wasn't arrested until the next day (had no idea he was a neighbor, he lived a few blocks away) when the police realized who he was.

But that's also the thing- we had no idea what his intent was. I do recall the police that night seeming less concerned because the door was unlocked and I was chided quite a bit. I do recall them telling me what I said in my initial post but I also understand criminal intent. Personally I'm glad the guy wasn't wrung up with a felony if he was just on some ambien sleepwalk bender or whatever he was on.

Re: Congressman's phone password is 111111

#108

Post by tfandango »

gambiting wrote: post #74
kerkeslager wrote: post #67

Earlier quoted context omitted.

No, it is not. These sorts of "I'm annoyed that I'm being forced to put in a password so I'll put the easiest one to type" passwords are in even the most basic password dictionaries, and are therefore susceptible to dictionary attack.

Sure, but if your angle of attack is "someone swiped my phone off my desk and wants to unlock it within the next 30 minutes before I wipe it remotely" then 111111 is as good as literally any other 6-digit pin code, unless the attacker just tries 111111. In which case 999999 is probably a better choice.

The problem is that 111111 and 999999 as well as 123456 etc are probably at the top of the list of codes to try before you start iterating brute force.

Re: Congressman's phone password is 111111

#109

Post by zerocrates »

cheschire wrote: post #50
duxup wrote: post #10

I tell this story a lot. But I think in the time of smartphones and such it also represents the only real secure site I thought was truly secure from what I knew of it. This was before smartphones were common, but I think it was ahead of its time in that way. I worked for a company that occasionally would service some of our hardware onsite. One customer was a company that did a lot of work for the military and they…

I'm hoping they've implemented some form of localized EMP that you have to pass through now to leave, because large storage is so incredibly small now that it would be impossible to discern it from articles of clothing. The "hard" part is really just getting the data off the computer in the first place, which is probably why they don't allow bringing in technology anymore. I wonder how much of a micro computer could…

> I'm hoping they've implemented some form of localized EMP

What would that do to, say, an artificial pacemaker? Feels a little, as you say, science fiction.

Re: Congressman's phone password is 111111

#110

Post by grepthisab »

emilfihlman wrote: post #88
slg wrote: post #78

And yesterday over a dozen members of Congress barged into one of the Congressional versions of this site without authorization and while recording video, audio, and taking photos on their personal smartphones. Here is a Twitter thread about why that is such a problem: https://twitter.com/MiekeEoyang/status/1187032800572125191

[flagged]

Truly awful take. Enough with the "both sides" nonsense. One side is objectively bad. Even accidentally taking electronics into a SCIF can be grounds for losing ones security clearance and getting in major trouble. These people planned it, and executed that plan, for a publicity stunt. Enough has been said about why it wasn't necessary in any way for them to act like this, so I won't go into it, see other responses to your comment.
Post reply on HN