Live data from Hacker News

FBI got Hacked, Reveals Hundreds of Passwords

pastebin.com

61–70 of 100 posts

Re: FBI got Hacked, Reveals Hundreds of Passwords

#61
post #4

A lot of these are good. Some not so much... passwords123 passwored12 password$qwerty qwertylol@me passwords123456 password123 password111111

Not a single sentence, can it be that they allow characters like ( and % but not whitespace? Boggles my mind that people don't use more sentences.

There's one ilovemydaughternancy with no spaces. Why would you want spaces?

Re: FBI got Hacked, Reveals Hundreds of Passwords

#62

I'm sure this comment will be heavily downvoted but I read several times that FBI and similar agencies were 7 years ahead in terms of technology including security of systems. I didn't believe in those quotes and every time a situation like this happens I'm more convinced that they are no more advanced than the big companies (Microsoft, Mozilla...) and depend heavily on the updates released by those companies every w…

Well I would think that the FBI would really be the wrong agency for this to apply to has they are really no more than just normal police officers on the federal level.

Re: FBI got Hacked, Reveals Hundreds of Passwords

#63
post #24
post #4

A lot of these are good. Some not so much... passwords123 passwored12 password$qwerty qwertylol@me passwords123456 password123 password111111

What's wrong with 3 and 4? It appears that, in general, the FBI staff are setting reasonable passwords. There are a few passwordNNN types but the majority are adequate and, in my opinion, would hold up well against a brute force vector, which is the primary purpose of password complexity.

3 and 4 would not take long to be brute forced by a dictionary attack, I think. Too many people use qwerty on their password, so it's probably high rated on a dictionary attack.

Re: FBI got Hacked, Reveals Hundreds of Passwords

#64

Earlier quoted context omitted.

Not a single sentence, can it be that they allow characters like ( and % but not whitespace? Boggles my mind that people don't use more sentences.

There's one ilovemydaughternancy with no spaces. Why would you want spaces?

I find that typing a bunch of words with spaces is faster than with words. I guess my brain is wired by now to automatically press the spacebar between words.

Re: FBI got Hacked, Reveals Hundreds of Passwords

#67

Earlier quoted context omitted.

Not a single sentence, can it be that they allow characters like ( and % but not whitespace? Boggles my mind that people don't use more sentences.

There's one ilovemydaughternancy with no spaces. Why would you want spaces?

There's also lovenancy18. Someone will have a long talk with his daughter.

Re: FBI got Hacked, Reveals Hundreds of Passwords

#68
post #4

A lot of these are good. Some not so much... passwords123 passwored12 password$qwerty qwertylol@me passwords123456 password123 password111111

Not a single sentence, can it be that they allow characters like ( and % but not whitespace? Boggles my mind that people don't use more sentences.

Personally I don't like spaces because every now and then I find a service that doesn't accept them - ex: you can't have spaces in your IRC password. ASCII printable characters are enough for me.

Re: FBI got Hacked, Reveals Hundreds of Passwords

#69
post #24
post #4

A lot of these are good. Some not so much... passwords123 passwored12 password$qwerty qwertylol@me passwords123456 password123 password111111

What's wrong with 3 and 4? It appears that, in general, the FBI staff are setting reasonable passwords. There are a few passwordNNN types but the majority are adequate and, in my opinion, would hold up well against a brute force vector, which is the primary purpose of password complexity.

3 and 4 are weak because we have pretty good heuristics on how passwords are composed so it wouldn't take much longer to brute-force them than it would to do password123.

Re: FBI got Hacked, Reveals Hundreds of Passwords

#70

I'm sure this comment will be heavily downvoted but I read several times that FBI and similar agencies were 7 years ahead in terms of technology including security of systems. I didn't believe in those quotes and every time a situation like this happens I'm more convinced that they are no more advanced than the big companies (Microsoft, Mozilla...) and depend heavily on the updates released by those companies every w…

If my experience having worked closely with local government IT, also applies to the FBI (I would bet it does). Then they, just like any technology in the public sector, is usually 10 years behind in technology compared to the private sector. They're just mostly bored undertrained people, with no real incentives to do a good job. Who would rather play office politics to raise chances of getting promotion, than to learn the heck is this php injection thingy.

As opposed to the Hollywood scenes of ultra high tech rooms with floating transparent screens, shiny lights everywhere, and super advanced systems that can listen to your voice commands and instantly solve complex cases just by saying "enhance!". Which is probably the vision this person who talked to you had. Reality is more like windows xp and programs that compile even when the unit tests fail.

Post reply on HN