Skip to main content
18 events
when toggle format what by license comment
Mar 1, 2022 at 15:05 history edited Michael come lately CC BY-SA 4.0
Credit SW. Slight readability edits.
May 29, 2016 at 4:02 comment added user2338816 If it ever actually works, first consequence would seem to be that a whole new set of "most common" passwords will arise.
May 28, 2016 at 1:54 comment added Amazon Dies In Darkness Assuming, and this is a big assumption, that Microsoft has the basic skills to block IP ranges, "10 million accounts being attacked each day" gives you an idea of the size of botnets combined with the intensity and frequency of secret government (and possibly corporate) data collection efforts.
May 28, 2016 at 1:48 comment added Amazon Dies In Darkness @SeldomNeedy Thanks. Yes, it is currently hard to know from that data. If someone tried logging in with every user name starting with a and going to ZZZZZ, with the password 123456, that could be counted as millions of "attacks". Ironically, such an attack would probably work on thousands of those accounts.
May 27, 2016 at 23:37 comment added Seldom 'Where's Monica' Needy @RockPaperLizard Looking at the security brief referenced in this article I get the sense that metrics for distinguishing attacks from "logon attempts" is partly heuristic e.g. unusual IP-address, etc. It's possible the real number is much lower or indeed much higher.
May 27, 2016 at 21:50 comment added phyrfox @AndréBorie Anyone could do it. The problem is you'd have to get all the OS developers to agree to it. That's the hard part.
May 27, 2016 at 17:11 answer added TecBrat timeline score: 2
May 27, 2016 at 12:49 vote accept Michael come lately
May 27, 2016 at 8:49 answer added CoffeDeveloper timeline score: 1
May 27, 2016 at 4:56 answer added Alex Weinert timeline score: 126
May 27, 2016 at 1:35 comment added André Borie I think OS developers should get together and create a cloud-based interoperable password manager (or equivalent with certificates/keys) built right into the OS. That way these problems will be a thing of the past and everyone wins.
May 26, 2016 at 19:55 history tweeted twitter.com/StackSecurity/status/735922250218672128
May 26, 2016 at 19:41 comment added Amazon Dies In Darkness I wonder what, exactly, Microsoft's Alex Weinert means when he writes "we see more than 10M accounts attacked daily". It would be very useful to know what constitutes an attack on an account to them. If that's answerable, say the word, and I'll post the question.
May 26, 2016 at 19:36 comment added Seiyria Maybe I'll care when I can have a password >16 chars.
May 26, 2016 at 17:13 comment added Xander @NeilSmithline You can ban common passwords specific to your site, you simply can't do it based on existing users passwords. I think this is what you were saying, but since the distinction is important I wanted to make sure it was clear.
May 26, 2016 at 17:12 answer added Xander timeline score: 30
May 26, 2016 at 17:08 comment added Neil Smithline I can't find it, but there's a question on this site about banning common passwords specific to your site. Whatever you do, it lowers security. So, no, can't be done
May 26, 2016 at 16:57 history asked Michael come lately CC BY-SA 3.0