Password Management – Epilogue

It has been a little over a week now since the Twitter password hack, which we now know to have been hack allowed by a system design flaw in the authentication system used by them, combined with human factors. A standard dictionary attack was used with a list of known words (combined with single or double numbers) to gain access blindly to a system administrator account on Twitter. This was a further confirmation that having a password strategy as I described last week is a damned fine idea, particularly with online services which unknown to you may have the same flaw – a susceptibility to dictionary password attack. Remember, not words…