#passphrases — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #passphrases, aggregated by home.social.
-
Strengthening Active Directory Password Rules Without Frustrating Users
Want to boost your Active Directory password security without driving users crazy? Ditch outdated complexity rules and switch to passphrases - longer, multi-word passwords that are easier to remember and harder for hackers to crack.
#ActiveDirectory #PasswordManagement #Passphrases #IdentitySecurity #Authentication
-
Exactly what I came here to say @joernsmock. Long strings of random characters are no harder for computers to guess than equally long strings made up of dictionary words. Epecially obscure or non-English words.
Claiming they are is a sales pitch for password managers vendors, not a security fact. Current passphrase advice reflects that XKCD comic, and suggests passphrases be long, memorable, and changed as infrequently as possible.
-
Exactly what I came here to say @joernsmock. Long strings of random characters are no harder for computers to guess than equally long strings made up of dictionary words. Epecially obscure or non-English words.
Claiming they are is a sales pitch for password managers vendors, not a security fact. Current passphrase advice reflects that XKCD comic, and suggests passphrases be long, memorable, and changed as infrequently as possible.
-
Just had the interesting thought occur to me that I'd like #autocorrect in my passwords and that's not actually insane?
I use #passphrases everywhere and I think everyone should.
Sometimes however, I typo somewhere while typing the dozens of characters; requiring me to type the entire thing again.
However, words are the source of entropy in my passphrases, not their characters.
Therefore, correcting any word that is not on the word list to the closest word that is would not diminish entropy.
-
In this week's ADMIN Update newsletter, Mark Heitbrink offers recommendations for team-capable password management
https://www.admin-magazine.com/Archive/2025/86/Passwords-passphrases-and-passkeys?utm_source=mam
#password #security #passphrases #passkeys #standards #guidelines -
In this week's ADMIN Update newsletter, Mark Heitbrink offers recommendations for team-capable password management
https://www.admin-magazine.com/Archive/2025/86/Passwords-passphrases-and-passkeys?utm_source=mam
#password #security #passphrases #passkeys #standards #guidelines -
It’s concerning how many people try to memorize #passwords like pX#7k!g and believe they’re safe.
That’s just way too few characters, and memorising is already almost impossible.
Instead of passwords, we should use #passphrases. They are easier to remember and, thanks to their greater length, significantly more secure – even if an attacker knows the list of words from which the phrase was constructed.
Passsatz can help with the creation. https://apps.apple.com/ch/app/passsatz/id6698877095
-
It’s concerning how many people try to memorize #passwords like pX#7k!g and believe they’re safe.
That’s just way too few characters, and memorising is already almost impossible.
Instead of passwords, we should use #passphrases. They are easier to remember and, thanks to their greater length, significantly more secure – even if an attacker knows the list of words from which the phrase was constructed.
Passsatz can help with the creation. https://apps.apple.com/ch/app/passsatz/id6698877095
-
I just published “Generating Passphrases Like correct horse battery staple” at
https://www.ii.com/passphrase-generators/ - please post suggestions for passphrase generators as a reply to this toot and I'll include them in my article!
#InfiniteInk #Privacy #Security #Tech #Passwords #Passphrases #CorrectHorseBatteryStaple
#Words #Writing #Byℵ #ByNM -
I just published “Generating Passphrases Like correct horse battery staple” at
https://www.ii.com/passphrase-generators/ - please post suggestions for passphrase generators as a reply to this toot and I'll include them in my article!
#InfiniteInk #Privacy #Security #Tech #Passwords #Passphrases #CorrectHorseBatteryStaple
#Words #Writing #Byℵ #ByNM -
@gabe_sky
Great idea, thanks! Bookmarked.As chance would have it, I also built another useful thing, way back in 2015:
https://batterystaple.pw/ - generates secure #Passphrases entirely in your browser
Like you, I built it because I was not happy with the existing alternatives. Since then, I have been using it quite regularly, but I have no idea if anybody else uses it (nor a way to find out).
In any case, I will gladly continue to pay for the domain name!
-
@gabe_sky
Great idea, thanks! Bookmarked.As chance would have it, I also built another useful thing, way back in 2015:
https://batterystaple.pw/ - generates secure #Passphrases entirely in your browser
Like you, I built it because I was not happy with the existing alternatives. Since then, I have been using it quite regularly, but I have no idea if anybody else uses it (nor a way to find out).
In any case, I will gladly continue to pay for the domain name!
-
Use strong, unique passphrases.
Passphrases are easier to remember and harder to crack.
#Passphrases #PasswordStrength #Authentication -
@evangreer @fightforthefuture.org @bsky.app @guardianproject @internetarchive @torproject @signalapp @session @simplex @freedomofpress @eff @privacysafe
🔐 #PrivacySafe Bot: Strong #passwords made simple.
Whether you’re setting up devices and user access ahead of time or recovering from a breach, get cryptographically strong passwords & #passphrases — right in your browser, on your device, never stored on a server.
https://bitsontape.com/p/password-bot-security -
@evangreer @fightforthefuture.org @bsky.app @guardianproject @internetarchive @torproject @signalapp @session @simplex @freedomofpress @eff @privacysafe
🔐 #PrivacySafe Bot: Strong #passwords made simple.
Whether you’re setting up devices and user access ahead of time or recovering from a breach, get cryptographically strong passwords & #passphrases — right in your browser, on your device, never stored on a server.
https://bitsontape.com/p/password-bot-security -
8,192 French #Diceware word list for use with computers.
-
8,192 French #Diceware word list for use with computers.
-
So what kind of policy framework do I have at my org? Goal is AAL2 per NIST 800-63B. Keep in mind, at least for the next decade or so still, passwords are not going anywhere - they are the last line of authentication while the world transitions to #passwordless
:finger_point: Encrypt everything, everywhere, all the time
:finger_point: VPN tunnels everywhere
:finger_point: PW polciy that enforces a minimum of 13-complex characters for passwords (passphrases are evangelized heavily) + mandatory MFA via an Authnticator app + 365-day rotation policy (unless someone phishes their credential or it comes up on a #darkweb monitor) + 30-day token expiration - we do have filtering to prevent anyone reusing old password or common passwords (no, I don't pay for it, you can integrate with AD directly with some clever #powershell, #jfgi.
:finger_point: For our admin accounts, we require #passphrases of at least 4 words (7 are recommended), using the diceware method (physical, not a website). PW rotation occurs every 180-days. Tokens expire every 24-hours.
:finger_point: Service accounts (where we cannot use auto-cycling API tokens) require a minimum 24-character very complex password or 4-word passphrase as MFA is required to be disabled. PW rotation occurs every 180-days.
:finger_point: Awareness trainings every quarter for high-risk/high-exposure employees, annually for the rest of the company. I update my presentation facts, data, and reported metrics frequently based on OSINT, SIGINT, HUMINT, research, and constant education. -
So what kind of policy framework do I have at my org? Goal is AAL2 per NIST 800-63B. Keep in mind, at least for the next decade or so still, passwords are not going anywhere - they are the last line of authentication while the world transitions to #passwordless
:finger_point: Encrypt everything, everywhere, all the time
:finger_point: VPN tunnels everywhere
:finger_point: PW polciy that enforces a minimum of 13-complex characters for passwords (passphrases are evangelized heavily) + mandatory MFA via an Authnticator app + 365-day rotation policy (unless someone phishes their credential or it comes up on a #darkweb monitor) + 30-day token expiration - we do have filtering to prevent anyone reusing old password or common passwords (no, I don't pay for it, you can integrate with AD directly with some clever #powershell, #jfgi.
:finger_point: For our admin accounts, we require #passphrases of at least 4 words (7 are recommended), using the diceware method (physical, not a website). PW rotation occurs every 180-days. Tokens expire every 24-hours.
:finger_point: Service accounts (where we cannot use auto-cycling API tokens) require a minimum 24-character very complex password or 4-word passphrase as MFA is required to be disabled. PW rotation occurs every 180-days.
:finger_point: Awareness trainings every quarter for high-risk/high-exposure employees, annually for the rest of the company. I update my presentation facts, data, and reported metrics frequently based on OSINT, SIGINT, HUMINT, research, and constant education. -
"The challenge in storing encrypted backup data is that strong encryption requires strong (or “high entropy”) cryptographic keys and passwords. Since most of us are terrible at selecting, let alone remembering strong passwords, this poses a challenging problem."
#MatthewGreen, 2020
This isn't as hard as people seem to think;
What's missing is education, including replacing "password" with "passphrase".
-
"The challenge in storing encrypted backup data is that strong encryption requires strong (or “high entropy”) cryptographic keys and passwords. Since most of us are terrible at selecting, let alone remembering strong passwords, this poses a challenging problem."
#MatthewGreen, 2020
This isn't as hard as people seem to think;
What's missing is education, including replacing "password" with "passphrase".
-
No, NCSC¹, passphrases of only three (or even four) random words are not sufficient - unless the user knows that the password hashing method is a "slow" one (bad for the attacker). Which is rarely guaranteed.
1025 combinations -- six words from a pool of 20K words, or five words from a pool of 100K words -- should be considered the minimum.
¹https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/three-random-words
-
No, NCSC¹, passphrases of only three (or even four) random words are not sufficient - unless the user knows that the password hashing method is a "slow" one (bad for the attacker). Which is rarely guaranteed.
1025 combinations -- six words from a pool of 20K words, or five words from a pool of 100K words -- should be considered the minimum.
¹https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/three-random-words
-
Vor kurzem wurde das 2024 update zum hive systems password table veröffentlicht und wird gerade wieder viel geteilt.
Leider behandelt hive systems das Theme passphrases absolut inadequat, deswegen haben wir das zum Anlass genommen unsere passphrase Tabelle zu aktualisieren.
Details im Kommentar. ⬇️
#passwords #passphrases #security #passwordSecurity #passphraseSecurity #diceware
-
Die Themen im Einzelnen:
- Geschichte und grundlegende Funktionen des Passworts
- kulturelle vs. pseudorandomisierte #Authentifizierung
- #Komplexitätsregeln und warum kurze Passwörter schlecht sind
- Mehrwort-#Passphrases
- Kulturalität von Passwörtern
- #Forschungsethik in der Passwortforschung
- Good Practice: Generieren, memorieren und aufbewahren von Passwörtern
- das #Passwort und alternative Authentifizierungsmethoden -
Die Themen im Einzelnen:
- Geschichte und grundlegende Funktionen des Passworts
- kulturelle vs. pseudorandomisierte #Authentifizierung
- #Komplexitätsregeln und warum kurze Passwörter schlecht sind
- Mehrwort-#Passphrases
- Kulturalität von Passwörtern
- #Forschungsethik in der Passwortforschung
- Good Practice: Generieren, memorieren und aufbewahren von Passwörtern
- das #Passwort und alternative Authentifizierungsmethoden -
Die Themen im Einzelnen:
- Geschichte und grundlegende Funktionen des Passworts
- kulturelle vs. pseudorandomisierte #Authentifizierung
- #Komplexitätsregeln und warum kurze Passwörter schlecht sind
- Mehrwort-#Passphrases
- Kulturalität von Passwörtern
- #Forschungsethik in der Passwortforschung
- Good Practice: Generieren, memorieren und aufbewahren von Passwörtern
- das #Passwort und alternative Authentifizierungsmethodenhttps://www.tuwort.com/index.php/2024/04/16/tuwort-spezial-8-das-passwort-mit-tobias-dussa/
-
Die Themen im Einzelnen:
- Geschichte und grundlegende Funktionen des Passworts
- kulturelle vs. pseudorandomisierte #Authentifizierung
- #Komplexitätsregeln und warum kurze Passwörter schlecht sind
- Mehrwort-#Passphrases
- Kulturalität von Passwörtern
- #Forschungsethik in der Passwortforschung
- Good Practice: Generieren, memorieren und aufbewahren von Passwörtern
- das #Passwort und alternative Authentifizierungsmethodenhttps://www.tuwort.com/index.php/2024/04/16/tuwort-spezial-8-das-passwort-mit-tobias-dussa/
-
New Episode: hpr4047 :: Change your passwords once in a while
Hosted by Deltaray on 2024-02-06 is flagged as Clean and released under a CC-BY-SA license.
Tags: #passwords, #security, #cyberSecurity, #PassPhrases, #PasswordManagers
-
New Episode: hpr4047 :: Change your passwords once in a while
Hosted by Deltaray on 2024-02-06 is flagged as Clean and released under a CC-BY-SA license.
Tags: #passwords, #security, #cyberSecurity, #PassPhrases, #PasswordManagers
-
New webpassgen release 20231024.
Two new password generators:
- Obscure passphrases
- Pure random whitespaceOther features include:
- Colored mouse selection to match the requested security level.
- "Every Word List" size now surpasses 2^16 unique words.
- Noto Sans Mono replacing the system font for more consistency.
- Passwords are aligned vertically.
- Base4 now uses the digits 0-3 instead of DNA nucleic acid sequences.#passwords #passphrases #opensource
https://github.com/atoponce/webpassgen/releases/tag/20231024
-
New webpassgen release 20231024.
Two new password generators:
- Obscure passphrases
- Pure random whitespaceOther features include:
- Colored mouse selection to match the requested security level.
- "Every Word List" size now surpasses 2^16 unique words.
- Noto Sans Mono replacing the system font for more consistency.
- Passwords are aligned vertically.
- Base4 now uses the digits 0-3 instead of DNA nucleic acid sequences.#passwords #passphrases #opensource
https://github.com/atoponce/webpassgen/releases/tag/20231024
-
If you have to remember them - passphrases are better than passwords.
What is a passphrase? Comparing #passwords vs. #passphrases:
https://proton.me/blog/https-proton-me-blog-what-is-passphrase
-
If you have to remember them - passphrases are better than passwords.
What is a passphrase? Comparing #passwords vs. #passphrases:
https://proton.me/blog/https-proton-me-blog-what-is-passphrase
-
What is #Fedi's opinion on #passphrases vs #passwords? Are passphrases just better?
For example,
Passphrase: pillowybarbsspike
Password: Tfu90PQ8vs352 -
What is #Fedi's opinion on #passphrases vs #passwords? Are passphrases just better?
For example,
Passphrase: pillowybarbsspike
Password: Tfu90PQ8vs352 -
#Passphrases are a great idea. I set mine to "password one two three exclamation point".
#infosec -
On LLM and passphrases ...
The thought has occurred that given that large language models are trained on texts, which one presumes includes not only Internet sources by scanned-in copies of published books and articles ...
... there's a strong probability that any given published word sequence appears within such a corpus ...
... and that given even a small sampling of a passphrase which is itself drawn from a similar corpus ... LLMs should be really good at guessing a given passphrase.
(How might it get a small sampling? Oh, say, shoulder-surfing, or acoustic signatures of typed characters, or leaks from inadvertently-entered phrases in the wrong dialogue, or other cues from context.)
Upshot: if you're relying on a single phrase from any published set of works ... as a long secret key ... you might want to reassess your threat model.
(I don't know that combining phrases from multiple sources might be an improvement ... though there are reasons to suspect that might also be at increased risk.)
(Oh, and by "you", I also mean "all the systems you're relying on, directly or indirectly". That would include, say, corporate, institutional, or governmental systems to which someone's previously relied on what they'd thought would be a long and hence difficult-to-crack phrase.)
(I also suspect that state-level actors will have first capabilities in this manner, but that that threshold will rapidly fall to far less-capable entities.)
(Many moons ago discussing security issues with a corporate user, I suggested that phrases from, oh, say, Alice in Wonderland would not be especially secure. Their passphrase was based on, of course, Jabberwocky.)
Edit: Markup.
#Security #LargeLanguageModels #LLM #AllYourTextAreBelongToUs #Passwords #Passphrases #GenerativeAI #ThreatModeling #ThreatModel
-
On LLM and passphrases ...
The thought has occurred that given that large language models are trained on texts, which one presumes includes not only Internet sources by scanned-in copies of published books and articles ...
... there's a strong probability that any given published word sequence appears within such a corpus ...
... and that given even a small sampling of a passphrase which is itself drawn from a similar corpus ... LLMs should be really good at guessing a given passphrase.
(How might it get a small sampling? Oh, say, shoulder-surfing, or acoustic signatures of typed characters, or leaks from inadvertently-entered phrases in the wrong dialogue, or other cues from context.)
Upshot: if you're relying on a single phrase from any published set of works ... as a long secret key ... you might want to reassess your threat model.
(I don't know that combining phrases from multiple sources might be an improvement ... though there are reasons to suspect that might also be at increased risk.)
(Oh, and by "you", I also mean "all the systems you're relying on, directly or indirectly". That would include, say, corporate, institutional, or governmental systems to which someone's previously relied on what they'd thought would be a long and hence difficult-to-crack phrase.)
(I also suspect that state-level actors will have first capabilities in this manner, but that that threshold will rapidly fall to far less-capable entities.)
(Many moons ago discussing security issues with a corporate user, I suggested that phrases from, oh, say, Alice in Wonderland would not be especially secure. Their passphrase was based on, of course, Jabberwocky.)
Edit: Markup.
#Security #LargeLanguageModels #LLM #AllYourTextAreBelongToUs #Passwords #Passphrases #GenerativeAI #ThreatModeling #ThreatModel
-
#Passwords are a popular topic today - which is good! Far too many people make up easy/simple passwords, reuse them, and complain that it's too hard to figure out #strong passwords AND remember them. I get it! But just adding more symbols or numbers just makes it harder for you to remember, but not a machine to guess. Computers can quickly go through the iterations of 'i', '1', '!', '|' that you used to change up the letter 'i' you have in your password. So why not make it easier on yourself and harder for the machine? Great question! Use #diceware! I've been using it myself for decades now, and enforce its use for #Sysadmins at my company. Use it to create super secure, random #passphrases of 4-6 words that are easy for you, and extremely difficult for a machine. Aside from the manual way of doing it (like I do) a #netizen made a site where it does the dice rolling for you and spits out words from the list that is likely better than whatever you do lol. Give it a try, be #CyberSecure https://diceware.rempe.us/#eff
-
#Passwords are a popular topic today - which is good! Far too many people make up easy/simple passwords, reuse them, and complain that it's too hard to figure out #strong passwords AND remember them. I get it! But just adding more symbols or numbers just makes it harder for you to remember, but not a machine to guess. Computers can quickly go through the iterations of 'i', '1', '!', '|' that you used to change up the letter 'i' you have in your password. So why not make it easier on yourself and harder for the machine? Great question! Use #diceware! I've been using it myself for decades now, and enforce its use for #Sysadmins at my company. Use it to create super secure, random #passphrases of 4-6 words that are easy for you, and extremely difficult for a machine. Aside from the manual way of doing it (like I do) a #netizen made a site where it does the dice rolling for you and spits out words from the list that is likely better than whatever you do lol. Give it a try, be #CyberSecure https://diceware.rempe.us/#eff
-
Hello Fellow Mastolorians!
In the 1830s, Americans thought tomatoes were poisonous, and many people refused to have anything to do with them. But within the space of just 10 years — without TV, radio or the Internet — consumer perception and behavior completely changed. This bodes really well for infosec pros concerned about how to improve consumer security behaviors.
#ICYMI — I joined Carey Parker, host of the consumer security and privacy podcast Firewalls Don't Stop Dragons for a light-hearted discussion on a serious topic: password security. Listen in to find out what the history of tomatoes in the U.S. can teach infosec professionals about educating consumers on good password hygiene.
More than 9,700 people have read this blogpost so far!
Grab a few tomatoes 🍅🍅🍅, have a listen (or read the transcript), and let me know what you think!
https://loistavainfosecurity.com/blog/f/tomatoes-one-time-pads-and-the-california-gold-rush
@FirewallDragons
#OneTimePads
#CaliforniaGoldRush
#Passwords
#Passphrases -
Hello Fellow Mastolorians!
In the 1830s, Americans thought tomatoes were poisonous, and many people refused to have anything to do with them. But within the space of just 10 years — without TV, radio or the Internet — consumer perception and behavior completely changed. This bodes really well for infosec pros concerned about how to improve consumer security behaviors.
#ICYMI — I joined Carey Parker, host of the consumer security and privacy podcast Firewalls Don't Stop Dragons for a light-hearted discussion on a serious topic: password security. Listen in to find out what the history of tomatoes in the U.S. can teach infosec professionals about educating consumers on good password hygiene.
More than 9,700 people have read this blogpost so far!
Grab a few tomatoes 🍅🍅🍅, have a listen (or read the transcript), and let me know what you think!
https://loistavainfosecurity.com/blog/f/tomatoes-one-time-pads-and-the-california-gold-rush
@FirewallDragons
#OneTimePads
#CaliforniaGoldRush
#Passwords
#Passphrases -
I wrote a short piece on #entropy in #passwords vs. #passphrases recently. https://www.oberbrunner.com/articles/entropy-and-passwords
-
Le #password sono cose serie. Eppure usiamo spesso password difficili da ricordare ma facili da craccare
Meglio una password facile da ricordare e difficile da violare
Un bell'articolo sulla scelta e la gestione di password e #passphrases si trova qui: https://palant.info/2023/01/30/password-strength-explained/
E' chiaro, utile e completo (quasi una lettura obbligatoria)
#cybersecurity #bitwarden #lastpass #security #passwordmanager
-
Le #password sono cose serie. Eppure usiamo spesso password difficili da ricordare ma facili da craccare
Meglio una password facile da ricordare e difficile da violare
Un bell'articolo sulla scelta e la gestione di password e #passphrases si trova qui: https://palant.info/2023/01/30/password-strength-explained/
E' chiaro, utile e completo (quasi una lettura obbligatoria)
#cybersecurity #bitwarden #lastpass #security #passwordmanager
-
Hello Fellow Denizens of Infosec.Exchange!
In the 1830s, Americans thought tomatoes were poisonous, and many people refused to have anything to do with them. But within the space of just 10 years — without TV, radio or the Internet — consumer perception and behavior completely changed. This bodes really well for infosec pros concerned about how to improve consumer security behaviors.
#ICYMI — I joined Carey Parker, host of the consumer security and privacy podcast Firewalls Don't Stop Dragons for a light-hearted discussion on a serious topic: password security. Listen in to find out what the history of tomatoes in the U.S. can teach infosec professionals about educating consumers on good password hygiene.
More than 9,700 people have read this blogpost so far!
Grab a few tomatoes 🍅🍅🍅, have a listen (or read the transcript), and let me know what you think!
https://loistavainfosecurity.com/blog/f/tomatoes-one-time-pads-and-the-california-gold-rush
@FirewallDragons
#OneTimePads
#CaliforniaGoldRush
#Passwords
#Passphrases -
Hello Fellow Denizens of Infosec.Exchange!
In the 1830s, Americans thought tomatoes were poisonous, and many people refused to have anything to do with them. But within the space of just 10 years — without TV, radio or the Internet — consumer perception and behavior completely changed. This bodes really well for infosec pros concerned about how to improve consumer security behaviors.
#ICYMI — I joined Carey Parker, host of the consumer security and privacy podcast Firewalls Don't Stop Dragons for a light-hearted discussion on a serious topic: password security. Listen in to find out what the history of tomatoes in the U.S. can teach infosec professionals about educating consumers on good password hygiene.
More than 9,700 people have read this blogpost so far!
Grab a few tomatoes 🍅🍅🍅, have a listen (or read the transcript), and let me know what you think!
https://loistavainfosecurity.com/blog/f/tomatoes-one-time-pads-and-the-california-gold-rush
@FirewallDragons
#OneTimePads
#CaliforniaGoldRush
#Passwords
#Passphrases -
#Strength #Memorability, and #Usability
Three things underlying in #ManuelBlum original proposal going beyond just using memorized #passwords #passphrasesvideo
“USENIX Enigma 2017 — Human Computation with an Application to Passwords”
https://www.youtube.com/watch?v=_8mAX6-spXYpaper
”The Complexity of Human Computation: A Concrete Model with an Application to Passwords“
https://www.researchgate.net/publication/318223424_The_Complexity_of_Human_Computation_A_Concrete_Model_with_an_Application_to_Passwords -
#Strength #Memorability, and #Usability
Three things underlying in #ManuelBlum original proposal going beyond just using memorized #passwords #passphrasesvideo
“USENIX Enigma 2017 — Human Computation with an Application to Passwords”
https://www.youtube.com/watch?v=_8mAX6-spXYpaper
”The Complexity of Human Computation: A Concrete Model with an Application to Passwords“
https://www.researchgate.net/publication/318223424_The_Complexity_of_Human_Computation_A_Concrete_Model_with_an_Application_to_Passwords -
@lauren yeah this nonsense does my head in and I'm a #software developer. Just encourage the use of #passphrases.
-
Hello Fellow Denizens of Infosec.Exchange!
In the 1830s, Americans thought tomatoes were poisonous, and many people refused to have anything to do with them. But within the space of just 10 years — without TV, radio or the Internet — consumer perception and behavior completely changed. This bodes really well for infosec pros concerned about how to improve consumer security behaviors.
#ICYMI — I joined Carey Parker, host of the consumer security and privacy podcast Firewalls Don't Stop Dragons for a light-hearted discussion on a serious topic: password security. Listen in to find out what the history of tomatoes in the U.S. can teach infosec professionals about educating consumers on good password hygiene.
More than 9,700 people have read this blogpost so far!
Grab a few tomatoes 🍅🍅🍅, have a listen (or read the transcript), and let me know what you think!
https://loistavainfosecurity.com/blog/f/tomatoes-one-time-pads-and-the-california-gold-rush
@FirewallDragons
#OneTimePads
#CaliforniaGoldRush
#Passwords
#Passphrases:boost_ok: Feel free to share (boost) this post with all those who follow you by clicking the cycled-arrow icon.
:mastodon: Here on Mastodon, boosting doesn’t elevate a post through any algorithmic shenanigans. Everyone who follows you gets to see the post (“toot”) without the platform interfering.