this post was submitted on 07 Dec 2025
131 points (98.5% liked)

World News

51107 readers
1777 users here now

A community for discussing events around the World

Rules:

Similarly, if you see posts along these lines, do not engage. Report them, block them, and live a happier life than they do. We see too many slapfights that boil down to "Mom! He's bugging me!" and "I'm not touching you!" Going forward, slapfights will result in removed comments and temp bans to cool off.

We ask that the users report any comment or post that violate the rules, to use critical thinking when reading, posting or commenting. Users that post off-topic spam, advocate violence, have multiple comments or posts removed, weaponize reports or violate the code of conduct will be banned.

All posts and comments will be reviewed on a case-by-case basis. This means that some content that violates the rules may be allowed, while other content that does not violate the rules may be removed. The moderators retain the right to remove any content and ban users.


Lemmy World Partners

News !news@lemmy.world

Politics !politics@lemmy.world

World Politics !globalpolitics@lemmy.world


Recommendations

For Firefox users, there is media bias / propaganda / fact check plugin.

https://addons.mozilla.org/en-US/firefox/addon/media-bias-fact-check/

founded 2 years ago
MODERATORS
 

It is a hacker’s dream. Even in the face of repeated warnings to protect online accounts, a new study reveals that “admin” is the most commonly used password in the UK.

The second most popular, “123456”, is also unlikely to keep hackers at bay.

It’s not just a problem here – Australians, Americans and Germans also use “admin” more than any other password when accessing websites, apps and logging in to their computers. Around the world, “123456” emerges as the most popular.

you are viewing a single comment's thread
view the rest of the comments
[–] Jimbabwe@lemmy.world -4 points 22 hours ago (4 children)

Invent your own hashing algorithm. It’s easy, fool-proof, secure, and reusable without compromising security.

Here’s a few examples: ebay.com password is moc.y4b3-saltyboi69 lemmy.world password is dlr0w.ymm3l-saltyboi69

(These aren’t real btw)

[–] Jumuta@sh.itjust.works 2 points 21 hours ago (3 children)

people writing password crackers are smarter than that dude

[–] Zaktor@sopuli.xyz 4 points 18 hours ago (1 children)

Most compromised passwords are used by script kiddies in mass attacks, not targeted attacks by elite hacking squads. If a password fails verbatim, they just move on to the next compromised account of millions, not develop pattern recognition software to try to figure out replacement candidates for each website.

[–] Jumuta@sh.itjust.works 1 points 3 hours ago* (last edited 3 hours ago)

Association attacks exist in the wild.

Let's say that this is their ebay account. In that case the reward for unlocking each account is very high, so attackers (even in mass attacks) have incentive to put in more work as long as the work cost per account hacked is less than the average reward and there is a net profit.

I assume in this day and age it's probably also viable to use LLMs for password guessing, as long as it's for a high value account. That unlocks a whole another can of worms and if it was me I'd never use low entropy passwords like "moc.y4b3-saltyboi69"

Perhaps this kind of password is viable if it's for an online service that implements rate limiting, but you also have to consider the case that a site gets hacked and their encrypted database (encrypted by each user's password) makes it onto the web. This has happened a lot recently and makes it ridiculously easy for people to throw their GPUs at the task.

load more comments (1 replies)
load more comments (1 replies)