<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd"
xmlns:rawvoice="http://www.rawvoice.com/rawvoiceRssModule/"
	>
<channel>
	<title>Comments on: App Store Hacked &#8211; How to Stay Safe Online</title>
	<atom:link href="http://www.worthgodwin.com/basic-computer-training/2010/07/app-store-hacked-how-to-stay-safe-online/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.worthgodwin.com/basic-computer-training/2010/07/app-store-hacked-how-to-stay-safe-online/</link>
	<description></description>
	<lastBuildDate>Tue, 06 Dec 2011 15:20:34 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
	<item>
		<title>By: Worth Godwin</title>
		<link>http://www.worthgodwin.com/basic-computer-training/2010/07/app-store-hacked-how-to-stay-safe-online/#comment-196</link>
		<dc:creator>Worth Godwin</dc:creator>
		<pubDate>Tue, 14 Sep 2010 04:29:27 +0000</pubDate>
		<guid isPermaLink="false">http://www.worthgodwin.com/basic-computer-training/?p=235#comment-196</guid>
		<description>Simon,

 I&#039;m not sure I follow all of your math, but I agree it can be difficult for people to memorize random strings of letters and numbers. 
 One option is to think of a &quot;pass&lt;strong&gt;phrase&lt;/strong&gt;&quot; instead of a pass&lt;strong&gt;word&lt;/strong&gt; -- use a combination of two words with a symbol between them such as % $ * ) (  etc., throw in a number, and then use unusual capitalization with a pattern to it so you can remember, such as capitalizing all vowels or all consonants.   

  So something like 9rEd*fOx or ReD#FoX121 perhaps, just to use an example off the top of my head.  Then you can remember a simple phrase but have a &quot;formula&quot; in your head to convert it into a password.  This is &lt;em&gt;roughly&lt;/em&gt; what I do with my passwords.

  Hope that makes sense, and thanks for the comment. 

    Worth</description>
		<content:encoded><![CDATA[<p>Simon,</p>
<p> I&#8217;m not sure I follow all of your math, but I agree it can be difficult for people to memorize random strings of letters and numbers.<br />
 One option is to think of a &#8220;pass<strong>phrase</strong>&#8221; instead of a pass<strong>word</strong> &#8212; use a combination of two words with a symbol between them such as % $ * ) (  etc., throw in a number, and then use unusual capitalization with a pattern to it so you can remember, such as capitalizing all vowels or all consonants.   </p>
<p>  So something like 9rEd*fOx or ReD#FoX121 perhaps, just to use an example off the top of my head.  Then you can remember a simple phrase but have a &#8220;formula&#8221; in your head to convert it into a password.  This is <em>roughly</em> what I do with my passwords.</p>
<p>  Hope that makes sense, and thanks for the comment. </p>
<p>    Worth</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Simon</title>
		<link>http://www.worthgodwin.com/basic-computer-training/2010/07/app-store-hacked-how-to-stay-safe-online/#comment-153</link>
		<dc:creator>Simon</dc:creator>
		<pubDate>Thu, 05 Aug 2010 17:29:26 +0000</pubDate>
		<guid isPermaLink="false">http://www.worthgodwin.com/basic-computer-training/?p=235#comment-153</guid>
		<description>You mention passwords. I am sure you are right about complexity (numbers, punctuation, case), and definately about dictionaries but I am not sure you are right about length. Fundamentally people struggle to remember more than about 5 characters. If they use longer words say the 8 characters beloved of Microsoft then it is not really possible without using some kind of word stem, making dictionary attack much more likely to be effective. In fact there are not really very many 6,7 and 8 letter words to use as stems.

Ignoring names, there are around 10000 &quot;common&quot; 3-5 letter words, 6370 6 letter words, 8883 letter words, and 10400 8 letter words. In other words longer passwords tend to mean the palate is around 20000 x 2 (case) x 30 (for a number or punctuation mark) x 2 (number first or last)  ... of the order 2,400,000 to 10,000,000 possibilities depending on how much users are willing to break up their words with numbers.

Conversely with a 5 character password selected from a 90 character palate there are more than enough combinations (5,273,862,160) once links to known words and names (around 50,000) have been excluded.

Accordingly shorter passwords (especially if dictionary checks are enforced) might actually be more secure - by these calculations 2000 times more secure!</description>
		<content:encoded><![CDATA[<p>You mention passwords. I am sure you are right about complexity (numbers, punctuation, case), and definately about dictionaries but I am not sure you are right about length. Fundamentally people struggle to remember more than about 5 characters. If they use longer words say the 8 characters beloved of Microsoft then it is not really possible without using some kind of word stem, making dictionary attack much more likely to be effective. In fact there are not really very many 6,7 and 8 letter words to use as stems.</p>
<p>Ignoring names, there are around 10000 &#8220;common&#8221; 3-5 letter words, 6370 6 letter words, 8883 letter words, and 10400 8 letter words. In other words longer passwords tend to mean the palate is around 20000 x 2 (case) x 30 (for a number or punctuation mark) x 2 (number first or last)  &#8230; of the order 2,400,000 to 10,000,000 possibilities depending on how much users are willing to break up their words with numbers.</p>
<p>Conversely with a 5 character password selected from a 90 character palate there are more than enough combinations (5,273,862,160) once links to known words and names (around 50,000) have been excluded.</p>
<p>Accordingly shorter passwords (especially if dictionary checks are enforced) might actually be more secure &#8211; by these calculations 2000 times more secure!</p>
]]></content:encoded>
	</item>
</channel>
</rss>

