Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Don't use 1234 as your password

nortonwang.com

Post reply on HN
Print view View original

21–30 of 56 posts

Re: Don't use 1234 as your password

#21

Post by Tomdarkness »

Quick and simple solution. If you are only using key based logins then just disable password SSH logins, add:

  ChallengeResponseAuthentication no
  PasswordAuthentication no
  UsePAM no
To your sshd config and then you don't need to worry as much about if one of your accounts has a password of 1234.

Re: Don't use 1234 as your password

#23

Post by jrockway »

dangrossman wrote: post #8

The very first time I tried Linux, after spending an entire day downloading Slackware, copying it to a set of install diskettes, partitioning a hard drive and installing it, I set my root password to "12345". I was around 10 at the time, 1995 plus or minus a year or two. After booting for the first time, I dialed up AOL and logged on to a Linux-topic IRC channel. I talked to the strangers there about how excited I wa…

Heh, I also destroyed my Linux system at about that age. "swapon /dev/hda". Oops.

Re: Don't use 1234 as your password

#25

Post by brownbat »

dangrossman wrote: post #8

The very first time I tried Linux, after spending an entire day downloading Slackware, copying it to a set of install diskettes, partitioning a hard drive and installing it, I set my root password to "12345". I was around 10 at the time, 1995 plus or minus a year or two. After booting for the first time, I dialed up AOL and logged on to a Linux-topic IRC channel. I talked to the strangers there about how excited I wa…

Oh don't worry, now they're deleting your files and extorting you to restore them.

http://krebsonsecurity.com/2013/11/cryptolocker-crew-ratchet...

Wanton destruction like the old days, now fueled by profit motive.

Re: Don't use 1234 as your password

#27

Post by purringmeow »

You just reminded me I need to check my VPS, although I am not using a simple password :(

EDIT: It seems that leaving your VPS unattended for a month is a bad idea. I can't login, because the server terminates the connection immediately and the passwords for the host's backend is changed. Great!

Re: Don't use 1234 as your password

#29

Post by eli »

brownbat wrote: post #25
dangrossman wrote: post #8

The very first time I tried Linux, after spending an entire day downloading Slackware, copying it to a set of install diskettes, partitioning a hard drive and installing it, I set my root password to "12345". I was around 10 at the time, 1995 plus or minus a year or two. After booting for the first time, I dialed up AOL and logged on to a Linux-topic IRC channel. I talked to the strangers there about how excited I wa…

Oh don't worry, now they're deleting your files and extorting you to restore them. http://krebsonsecurity.com/2013/11/cryptolocker-crew-ratchet... Wanton destruction like the old days, now fueled by profit motive.

It might be true that its use is on the rise, but that's an old idea. I encountered "ransomware" in the wild in the late 90s/early 2000s.
Post reply on HN