From the Unique Uses for 1Password Department
That’s not exactly a use case we had in mind but… hey, I think it’s good with the TOS so knock yourselves out.
Credit card numbers, checksums, and hashes. The story of a robocall scam
As Lívia and I were out walking Molly and Patty on Monday evening, I received a telephone call from an unknown number. I decided to answer the phone anyway, and I was greeted by a recorded voice telling me that my Bank of America debit card beginning with 4217 has been limited and whether I [...]
Dropbox follows through on password resets
Have you been asked to reset your password when you try to log into Dropbox.com? You aren’t alone, and this is all as expected. If you haven’t changed your Dropbox password in a while, you (like me) will be asked to change when you log into the website. Back in July, Dropbox announced that they [...]
Ars Technica explains the iPhone and iPad UDID and why it matters
If you’ve ever been curious as to what all this iPhone and iPad UDID (Unique Device Identifier) business is about, or why it’s such an important piece of information, Ars Technica has a great Q&A-format overview that should satiate your curiosity: On Tuesday, an offshoot of Anonymous, called AntiSec, claimed to have purloined a list [...]
Guess what? A Post-It under your keyboard is not the worst place to keep a password
The Sophos NakedSecurity blog has some excellent password security advice to kick off your Monday morning: “Before being interviewed on TV, wipe passwords off whiteboard“. Here’s a shot from TVP, a Polish television channel, that prompted this timely refresher: Note that “hasło” is the Polish word for ‘password’. I guess a scrap of paper under your keyboard is [...]
On Ars Technica’s most excellent comprehensive review of password security
Dan Goodin at Ars Technica published an excellent article reviewing password security and explaining why people need randomly generated and unique passwords for every site and service. That is a message you hear from us frequently. One thing that is clear from Goodin’s review is that many of the underlying issues are more complicated than most people [...]
More than just one password: Lessons from an epic hack
Mat Honan, a 1Password user and writer for Wired, did everything right. He had strong, unique passwords everywhere. Yet he was the victim of an “epic hack”, and had to put a great deal of effort into getting his digital life back. A very brief account of this Homer-worthy hack is that someone talking to [...]
Blizzard and insecurity questions: My father’s middle name is vR2Ut1VNj
By now most people will have heard that email addresses, hashed passwords, and some other data has been stolen from Blizzard’s Battle.net servers, and people are advised to change their passwords there. As unfortunate as this story is, it serves as yet another good reminder of why we very strongly encourage people to not reuse [...]
Password reuse strikes again, and a bit closer to home at Dropbox
Not so long ago, I wrote about a case where attackers were taking passwords that were leaked from one site to go after users on another. In that case, the target was Best Buy. Today’s case hits a bit closer to home for 1Password users, as Dropbox accounts are being attacked using passwords stolen from non-Dropbox [...]
1Password is Ready for John the Ripper
John the Ripper, the pre-eminent password cracking tool, is getting ready to take on 1Password. Is 1Password ready? Yes! We have been ready for a long time, but you need to do your part by having a good Master Password. We’ve written many times about how 1Password defends against automated password guessing programs (password crackers). [...]