Reply to topic  [ 5 posts ] 
Russia gang hacks 1.2 billion usernames and passwords 
Author Message
What's a life?
User avatar

Joined: Thu Apr 23, 2009 6:27 pm
Posts: 12251
Reply with quote
Quote:
A Russian group has hacked 1.2 billion usernames and passwords belonging to more than 500 million email addresses, according to Hold Security - a US firm specialising in discovering breaches.

Hold Security described the hack as the "largest data breach known to date".

It claimed the stolen information came from more than 420,000 websites, including "many leaders in virtually all industries across the world".

http://www.bbc.co.uk/news/technology-28654613

Usernames & passwords is broken, terminally. We need a better solution.

_________________
All the best,
Paul
brataccas wrote:
your posts are just combo chains of funny win

I’m on Twitter, tweeting away... My Photos Random Avatar Explanation


Wed Aug 06, 2014 11:25 am
Profile
Spends far too much time on here
User avatar

Joined: Thu Apr 23, 2009 6:44 pm
Posts: 4141
Location: Exeter
Reply with quote
paulzolo wrote:
Usernames & passwords is broken, terminally. We need a better solution.


Any ideas as to what to replace them with?

_________________
"The woman is a riddle inside a mystery wrapped in an enigma I've had sex with."


Wed Aug 06, 2014 11:33 am
Profile WWW
I haven't seen my friends in so long
User avatar

Joined: Fri Apr 24, 2009 6:06 pm
Posts: 6355
Location: IoW
Reply with quote
paulzolo wrote:
Secure storage of Usernames & passwords is broken, terminally. Companies need to put greater efforts into user security.


IFTFY ;)

_________________
Before you judge a man, walk a mile in his shoes; after that, who cares?! He's a mile away and you've got his shoes!


Wed Aug 06, 2014 12:41 pm
Profile
What's a life?
User avatar

Joined: Thu Apr 23, 2009 8:25 pm
Posts: 10691
Location: Bramsche
Reply with quote
jonlumb wrote:
paulzolo wrote:
Usernames & passwords is broken, terminally. We need a better solution.


Any ideas as to what to replace them with?
SQRL
It is a sign on technology that uses cryptography and public private keys. You never give the site your key and you have a unique sign on for every site. Only if you're local PC gets hacked do you have a problem.

If one site gets hacked, only that site can be compromised and you just need to invalidate the current pairing and create a new key pairing for it.

It can also be anonymous, there is no username required.

_________________
"Do you know what this is? Hmm? No, I can see you do not. You have that vacant look in your eyes, which says hold my head to your ear, you will hear the sea!" - Londo Molari

Executive Producer No Agenda Show 246


Wed Aug 06, 2014 1:09 pm
Profile ICQ
What's a life?
User avatar

Joined: Thu Apr 23, 2009 6:27 pm
Posts: 12251
Reply with quote
big_D wrote:
jonlumb wrote:
paulzolo wrote:
Usernames & passwords is broken, terminally. We need a better solution.


Any ideas as to what to replace them with?
SQRL
It is a sign on technology that uses cryptography and public private keys. You never give the site your key and you have a unique sign on for every site. Only if you're local PC gets hacked do you have a problem.

If one site gets hacked, only that site can be compromised and you just need to invalidate the current pairing and create a new key pairing for it.

It can also be anonymous, there is no username required.


All sounded good until it started mentioning QR codes. https://www.grc.com/sqrl/sqrl.htm

_________________
All the best,
Paul
brataccas wrote:
your posts are just combo chains of funny win

I’m on Twitter, tweeting away... My Photos Random Avatar Explanation


Fri Aug 08, 2014 11:37 am
Profile
Display posts from previous:  Sort by  
Reply to topic   [ 5 posts ] 

Who is online

Users browsing this forum: No registered users and 8 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group
Designed by ST Software.