11 year old making big bucks by suggesting passwords. Wait, what?

[The Day Dreamer]

https://www.yahoo.com/tech/11-old-sells-secure-passwords-162637778.html

Apparently she is using some sort of age old DICE method. Smarty?

 

[Homerboy]

"Modi has managed to sell thirty passwords in her first month of business, according to Ars Technica"

"Big bucks" not found.

 

[MongGrel]

Seems to probably have a lot of people on Facebook or something or friends of the family doing it probably.

Cute story, but I was making more money that that mowing lawns at age 11 back around 1972.

A feel good story never hurts I guess, good for her, but hardly newsworthy.

 

[digiram]

couldn't people roll their own dice? lol

 

[madoka]

https://www.yahoo.com/tech/11-old-sells-secure-passwords-162637778.html

Apparently she is using some sort of age old DICE method. Smarty?

Did you not bother reading the article?

Her mom is a tech journalist. She's the one driving the whole thing.

Plus she sold $60 of passwords in her first month. I don't think even my kids would consider that "big bucks."

 

[Printer Bandit]

so she knows people's passwords. doesn't seem legit.

 

[Elixer]

https://www.random.org/dice/ works as well...
Guess they will write stories about anything these days.

Maybe someone should offer the same services and undercut their asking price...then they can write how mean they are... 😉

 

[lxskllr]

This how I make passwords...

 

[NikolaeVarius]

Insanely stupid and it's pretty ridiculous that this is even a story.

 

[purbeast0]

404 -

not found.

 

[SunnyD]

This how I make passwords...

Now remember that without using a program or tool.

Apparently you didn't read the article.

 

[Genx87]

This how I make passwords...

How much do you charge to create complex passwords? I need about 3000 of them.

Thanks!

 

[lxskllr]

Now remember that without using a program or tool.

Apparently you didn't read the article.

I read it. How often am I away from my phone, or computer?

Answer ~.000001% of the time.

 

[NikolaeVarius]

Now remember that without using a program or tool.

Apparently you didn't read the article.

A modern secure password that you can easily remember is generally a pretty shitty password.

 

[lxskllr]

How much do you charge to create complex passwords? I need about 3000 of them.

Thanks!

I can give a steep discount on quantity purchases. For 3000, I can do it for 10¢ each. I accept cash, or bitcoin.

 

[SunnyD]

I read it. How often am I away from my phone, or computer?

Answer ~.000001% of the time.

And when you're detained at the border and they're demanding your password, which they can't legally compel you to provide but can legally extract from a device?

No, you didn't read the article.

 

[lxskllr]

And when you're detained at the border and they're demanding your password, which they can't legally compel you to provide but can legally extract from a device?

No, you didn't read the article.

My passwords are encrypted, and the password to unlock it(which I remember) has ~325 bits of entropy. Nobody's extracting anything from me, or my device.

 

[Rakehellion]

she rolls real-world dice, looks up the matching words on a physical copy of the Diceware word list and then handwrites the resulting password to be distributed via snail mail.

Sounds insecure. I'll pass.

 

[John Connor]

I use the firefox addon in Pale Moon called PWDhash. It was developed by three dudes at Stanford. Check it out.

But if you want to make your own password, one that is damn hard to crack then do the following: Think of a song, like the first few words, such as, All The Leaves Are Brown and The Sky Is Gray. Now use the first letter in those words. ATLABATSIG now add some numbers you can remember. You could even use your pin or last four SSN since there are letters added. ATLABATSIG1234 now think of maybe four more numbers but press and hold shift to make symbols. ATLABATSIG1234!@#$.

Congratulations. You just made a password that Bruce Schneier bloged about and I thought of years before. My computers that use Truecrypt use a password derived in this manner have never been written down. It's over 20 characters long, use upper, lower case letters, numbers and symbols.

 

[Ichinisan]

She could make even more money by logging the passwords she has sold and selling them to a hacker to add to his password dictionary.

 

[Jeff7]

https://www.random.org/dice/ works as well...
Guess they will write stories about anything these days.

Maybe someone should offer the same services and undercut their asking price...then they can write how mean they are... 😉

Or this page at the same site:
https://www.random.org/passwords/

Or if you have a cat, have it walk across the keyboard or sit on it.

My passwords are encrypted, and the password to unlock it(which I remember) has ~325 bits of entropy. Nobody's extracting anything from me, or my device.

Everyone has their price. Everyone has their price.


(* - "price" doesn't necessarily have to be monetary: While we're on the subject of XKCD and password security...)

 

[BudAshes]

My passwords are encrypted, and the password to unlock it(which I remember) has ~325 bits of entropy. Nobody's extracting anything from me, or my device.

Yeah, those fuckers will never get to see your cats in funny hats pics. Those are for your eyes only.

 

[John Connor]

My passwords are encrypted, and the password to unlock it(which I remember) has ~325 bits of entropy. Nobody's extracting anything from me, or my device.

What if the FBI parks a van by your house and does a little side channel work? Or you get a key logger in your OS? 😀

But what concerns me the most is those pesky Orion satellites doing side channel attacks from orbit. Now if you excuse me, I have a tin foil hat to gold plate.