you do this every day many times over: type a username, then a password<\/p>\n
but why? it’s all just letters and numbers, right?<\/p>\n
it is known that most smart attacks involve some kind of social engineering e.g. the attacker knows the victims name, and tries a list of well known passwords (like 1234, admin, test etc) from a list – sometimes a dictionary helps, too, with the most common names, or combinations of username with birthyear etc (like john1975)
\nand then it’s up to the password to keep you safe – so you ought to choose one that’s long and has special characters in it (like #<*). if that doesn’t work the attacker digs deeper and calls coworkers, pretending to be a friend, super, lawenforcer or other coworker to obtain more infos.
\nBUT the name is still fairly simple to guess. so WHY NOT get rid of it?<\/p>\n
let’s say your username has 10 letters, and the password is another 10 – that’s 20 letters to type, and in between you gotta use the mouse to move from field to field (or the cursor or tab)
\nthe first 10 though are almost a waste of time, and the next 10 are supposed to be very difficult to guess (if you can’t find the post-it-note next to the screen!) – so sometimes people put a post-it up on their monitor with that info …<\/p>\n
what about if you just enter a (complicated) 15 letter ‘access code’ that might have some personal meaning to the user? eg FOOL1975=>JOHN!<\/p>\n
hard to guess, in NO dictionary, personalized, shorter than 20, and safer!<\/p>\n
almost as safe as certificates – but who remembers a sha1 hash with 40 characters? besides, the # of wrong logins and attempts per timeunit has to be limited anyways<\/p>\n","protected":false},"excerpt":{"rendered":"
you do this every day many times over: type a username, then a password but why? it’s all just letters and numbers, right? it is known that most smart attacks involve some kind of social engineering e.g. the attacker knows the victims name, and tries a list of well known passwords (like 1234, admin, test […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[],"class_list":["post-76","post","type-post","status-publish","format-standard","hentry","category-software-stuff"],"_links":{"self":[{"href":"http:\/\/www.zokul.com\/zokulblog\/index.php?rest_route=\/wp\/v2\/posts\/76","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.zokul.com\/zokulblog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.zokul.com\/zokulblog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.zokul.com\/zokulblog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.zokul.com\/zokulblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=76"}],"version-history":[{"count":6,"href":"http:\/\/www.zokul.com\/zokulblog\/index.php?rest_route=\/wp\/v2\/posts\/76\/revisions"}],"predecessor-version":[{"id":153,"href":"http:\/\/www.zokul.com\/zokulblog\/index.php?rest_route=\/wp\/v2\/posts\/76\/revisions\/153"}],"wp:attachment":[{"href":"http:\/\/www.zokul.com\/zokulblog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=76"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.zokul.com\/zokulblog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=76"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.zokul.com\/zokulblog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=76"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}