Passwords have always been a weak link in online financial security and privacy, and having them inspired by Star Wars makes matters worse, writes ARTHUR GOLDSTUCK, offering some tips for safer log-ins.
Anyone who uses the password “123456” or “password” for an online service is asking to be hacked. Some think they’re being clever and choose a word inspired by a new movie or craze, and find they are equally at risk.
The latest list of the world’s worst passwords highlights stupidity, carelessness, and laziness – but also gives us a few clues on how to protect ourselves from hackers trying to guess their way past our defences.
The top six most commonly used passwords of 2015, according to SplashData, a global provider of password management applications, have not even changed from the year before – so complacent are the people using them. The order of their popularity has shifted, but that barely moves the needle of the stupidity index at work.
|The top six are:|
SplashData’s fifth annual report is compiled from more than 2-million leaked passwords. The company points out that, while new and longer passwords have entered the top 25 list, they are often so simple, their extra length is “virtually worthless as a security measure”.
The report highlights the following newcomers to the top 25 list to illustrate this point:
- 1qaz2wsx (the first two columns of main keys on a standard keyboard)
- qwertyuiop (top row of keys on a standard keyboard)
Almost hilariously, “football” and “baseball” make the top 10. Who would have guessed? Equally predictably, three passwords inspired by Star Wars quickly entered the top 25 in the wake of release of The Force Awakens. The uninspired choices were “starwars,” “solo,” and “princess”, joining “welcome”, “login” and “passw0rd.”
We may joke, of course, but even experienced users often make a poor choice of password, such as the name of a close relative or pet. Innocent posts on their Facebook profiles or Twitter feeds could well expose the options for a hacker to try.
To make matters worse, according to research conducted by security software leaders Kaspersky Lab, a high proportion of Internet users share their passwords with somebody or leave them visible for others to see. In South Africa, no less than 42% of Internet users admitted to doing so. One in ten said they shared passwords with friends and 8% said they shared them with colleagues.
“Once shared, it is very difficult to know exactly where your password will end up,” warns David Emm, principal security researcher at Kaspersky Lab. “Our research shows that there is a real disconnect between the understanding of why we need strong passwords and the action people take to keep them safe.”
The survey showed that only half (51%) of SA consumers thought email required a strong password, and a third (32%) for social media sites. For online shopping, the proportion dropped to 24%.
The underlying threat these figures reveal is the fact that an email address is usually the gateway to all other services a person uses online. Hack into someone’s e-mail, and you have the keys to their financial and social kingdom.
“At worst, entire identities could be put at risk,” says Emm. “Even the most complex password is weak if it’s visible to others.”
How to choose a strong password
Choosing a strong password is as much about common sense as it is about being savvy in the online streets. The litmus test for a weak password is simple: will someone else be able to guess my password randomly?
The test for a reasonably strong password is equally simple: will someone be able to hit on my password by trying variations on names that mean something to me?
The challenge, then, is to come up with something that the user will remember, but no one would be able to guess. That means it should be personal, but in such a way that only the user will know it.
The Kaspersky blog suggests what it calls a “Story Algorithm”. It goes like this:
- Think of a phrase, song lyrics, quotes from a movie or simply a lullaby from when you were a child.
- Take the first letter from the first five words.
- Between every letter add a special character.
“At this stage you will have created a static string, and from now on you will base all of your unique passwords off of this string. Since it’s a static string, it won’t be unique for every site that you need a password for. What you need to do now is use the power of association.
“When you think of Facebook, Twitter, eBay, dating sites, online gaming sites or any other site, write down the first word that you associate with that site that you need a password for. For example, if you are creating a password for Facebook, you might associate Facebook with the blue color in the logo: so, then you can simply append the word ‘blue’, maybe in all caps, at the end of your static string.”
That may be too complex for most people. A quicker route is to take the names of two distant relatives and add a number or two between the names. This number or the names or their order can be changed for each site used. A master list can be kept, listing only the initials used for each password. The master list itself should then be password protected in case someone finds a way to access it on the computer where it’s stored. That password should be the most complex of all.
Ultimately, the user’s own paranoia levels and the sensitivitity of the information being protected will dictate the complexity of password choice. At the absoulte bare minimum, though, avoid a password that resembles anything on the SpashData list as if your life depends on it. That may well turn out to be the literal truth.
SplashData’s “Worst Passwords of 2015”
|Rank||Password||Change from 2014|
Test your password
The Kaspersky Secure Password Check guides users in creating a secure password. Type in the word, string or phrase, and it immediately provides feedback on how long it will take an average computer to crack the password by brute computing force. Try it at https://blog.kaspersky.com/password-check/
Huawei goes ultra-premium
Porsche Design and Huawei have launched the Porsche Design Huawei Mate RS in South Africa exclusive to MTN and retailing for R 26 459.
The Porsche Design Huawei Mate RS boasts features like the world’s first dual fingerprint design, including an in-screen fingerprint sensor, the world’s first Artificial Intelligence (AI) processor and Leica triple camera with 40MP image capture.
“After the overwhelming success of the Porsche Design Huawei Mate 10 Pro in South Africa, we now bring you our latest offering, a perfect blend of innovation in a smartphone and luxury design,” said Likun Zhao, Vice President of Huawei Consumer Business Group Southern Africa. “From three-point security feature including facial recognition, rear fingerprint scanner and the new innovative in-screen fingerprint to the Leica triple camera system. it culminates in an unprecedented experience for our customers.”
The device incorporates Porsche Design’s signature design language and Huawei’s breakthrough technology. The phone has a 6” 2K curved OLED screen and symmetrical look, minimalist feel and 8-edged 3D curved glass body.
High performance is symbolised by the naming of the smartphone: the term “RS” in the world of Porsche motorsport stands for outstanding racing performance.
Huawei provided the following information on The Porsche Design Huawei Mate RS benefits and features :
· The world’s first dual fingerprint scanner for enhanced convenience, allowing users to wake and unlock the device simply, thanks to an in-screen fingerprint sensor. Hover to wake the device, touch to unlock it
· The winning combination of Leica triple camera with 40MP RGB sensor technology and exceptional photography powered by Master AI. This combination puts effortless, eye-catching photography at the fingertips of those looking to immortalise their favourite moments. Combined with 5 x hybrid zoom, and the world’s first AI image stabilisation on a smartphone camera ensures photography lovers can capture the best shots with exceptional clarity in almost any situation
· The Porsche Design Huawei Mate RS is the first Huawei handset to allow quick wireless charging, making it even easier to keep the phone topped up and ready to go and, thanks to its long lasting battery, users will easily be powered through the busiest of days
· An ‘intelligent’ smartphone, the powerful AI processor automatically tailors the performance of the phone according to how it is used – constantly learning, understanding and anticipating needs, it is the perfect personal assistant for the pocket
· 256GB of internal storage means those constantly on the go and constantly on their phone can be worry free
· Dual SLS (super linear system) speakers with DOLBY ATMOS enable users to have a superior experience, with the best immersive surround sound and entertainment on the go
· Splash, water and dust resistant, which means there is no need to worry about damaging the device in the rain or accidentally dropping it in water
Jan Becker, CEO Porsche Design Group, said: “Both Porsche Design and Huawei seek to imagine and develop products that stand for precision and perfection, intelligent functionality and highly sophisticated design. Our aim was to create an outstanding device that goes one step further. We believe we have reached this goal by taking our partnership to the next level.”
Porsche Design and Huawei have worked in tandem to develop a smartphone that fuses together the two brands’ DNA, wealth of experience in design and technology, industry-leading expertise and exceptional performance. Through the use of colour in the device’s body, software themes and accessories, the new handset is accentuated with Porsche Design’s distinguished aesthetic and purist, minimalist feel.
The Porsche Design Huawei Mate RS will be available to purchase exclusively from MTN at R 26 459.
Cross-channel chat launched
Clickatell has launched a cross-channel live chat service, Touch Go, that transforms omni-channel customer care.
It enables live chat across a company’s website as well as social platforms (Twitter and Facebook) and mobile apps, bringing customer care and engagement into a single business platform.
“Today’s consumers expect to engage with your brand on the digital channel of their choosing,” says Deon van Heerden, Clickatell Engage CEO and Group CFO. “They want to message your business and instantly have queries resolved, find the information and services they are looking for, without the need for a voice call. Clickatell’s Touch Go makes that happen with the right level of capabilities for businesses of all sizes.”
Businesses can start using Touch Go immediately, with a free Starter option. Touch Go requires no credit card for sign-up and is fully featured with a simple setup process. It offers customisable branding, a unified chat desk business application as well as reports and analytics.
As the business scales up its digital customer care, it can opt-in for the Touch Enterprise offering. Touch Enterprise is designed for scaling up customer care efforts through advanced capabilities including AI driven virtual agents, sentiment analysis, automated workflows, enterprise integrations and in-channel mini-applications.
“Customer care has become a defining factor for sustained business success ” says Nirmal Nair, Clickatell Engage EVP Product & Marketing. “In an ever-increasing mobile native world, customers often choose to interact digitally, but they also expect to be able to reach a human immediately, should they need. Monitoring multiple channels and providing immediate action becomes challenging with siloed deployments. Touch’s unified solution allows businesses of all sizes to provide the customer delight in a simple modular approach.”