The password “ji32k7au4a83” has been seen over a hundred times

Post by meruru » Mon, Mar 04, 2019, 3:45 AM UTC

jjnoakes wrote: post #88

cantrevealname wrote: post #71

Earlier quoted context omitted.

I'm willing to bet that a major upcoming security disaster is a compromised password manager that leaks out tens of millions of accounts and passwords in nicely structured XML that's perfect for automated attacks and frauds. Yes, I use a password manager too, but an ancient one that has no Internet connection, no syncing, and no cloud storage. The only "modern" password manager I've been able to find that works compl…

What I do is use a password manager, but when it enters a password into an app or site, I type a few more characters after the end of it before logging in. Kind of a secondary master password that's not stored anywhere except my memory and my safe. Best of both worlds in my opinion.

Post by chrischen » Mon, Mar 04, 2019, 3:53 AM UTC

ilamont wrote: post #49

swang wrote: post #34

This is using the zhuyin keyboard which most likely means Taiwanese users since Taiwan is probably the sole user of the zhuyin keyboard. Typing that out on a zhuyin keyboard gets you: ㄨㄛˇㄉㄜ˙ㄇㄧˋㄇㄚˇ In Pinyin that is wo3 de mi4ma3 Or in English "my password"

For the unfamiliar, "ㄨㄛˇㄉㄜ˙ㄇㄧˋㄇㄚˇ" is an example of "bopomofo" script, the phonetic system used to teach kids reading and pronunciation in Taiwan, and adapted to Chinese keyboard input (zhuyin). I learned it in the 1990s studying Mandarin in Taipei. It maps closely to pinyin romanization used in China (i.e., "ㄨㄛˇ" = "wo3" which is the sound in the Mandarin dialect for "我" and potentially other characters with the sam…

Post by geofft » Mon, Mar 04, 2019, 4:00 AM UTC

cyberferret wrote: post #55

swang wrote: post #34

This is using the zhuyin keyboard which most likely means Taiwanese users since Taiwan is probably the sole user of the zhuyin keyboard. Typing that out on a zhuyin keyboard gets you: ㄨㄛˇㄉㄜ˙ㄇㄧˋㄇㄚˇ In Pinyin that is wo3 de mi4ma3 Or in English "my password"

I see this same explanation on the Twitter thread, which is great. However, I am concerned at how the OP got the string in the first place, that he compared to HaveIBeenPwned? Is he storing his user's passwords in plain text in his back end database, and decided to run them all against the service?? That in and of itself is a security red flag.

Post by titanix2 » Mon, Mar 04, 2019, 4:10 AM UTC

thratchnee wrote: post #74

ilamont wrote: post #49

Earlier quoted context omitted.

For the unfamiliar, "ㄨㄛˇㄉㄜ˙ㄇㄧˋㄇㄚˇ" is an example of "bopomofo" script, the phonetic system used to teach kids reading and pronunciation in Taiwan, and adapted to Chinese keyboard input (zhuyin). I learned it in the 1990s studying Mandarin in Taipei. It maps closely to pinyin romanization used in China (i.e., "ㄨㄛˇ" = "wo3" which is the sound in the Mandarin dialect for "我" and potentially other characters with the sam…

https://en.m.wikipedia.org/wiki/Bopomofo Wikipedia says it was created under the Beiyang Government so no. Also bopomofo is an alphabet (seperate characters for consonants and vowels) where as katakana/hiragana are syllabaries However all three systems are derived from regular Chinese script. Hiragana is derived from cursive Chinese script, Katakana from radicals used as shorthand for certain characters, and Bopomofo…

Post by sp332 » Mon, Mar 04, 2019, 4:16 AM UTC

cyberferret wrote: post #53

I just keep the RandomKeyGen [0] site on the top of my bookmarks, and whenever I need to set a password for a newly spun up server, or SQL DBA admin password etc., I just pick a random one from there. Advantage over a password manager? - sometimes I have to document what the password is in offline technical notes or a password vault for the customer, and doing it this way lets me kill two birds with one stone. [0] -…