thoiboi

Fucking roller coaster ride....


Dolla dolla bills Frantz!!!! Soon you'll be the next BoostedJack!!!!

Franchise1124

If I end up with BoostedJack money, I'll use a V just to drive to my mailbox and back.

P1 will be the grocery getter and a HondaJet in KBP will be the weekend toy

justnspace

iTrader: (1)

I like that new "civic" of Jets! KBP would be icing on cake
time share, any one?

polobunny

Man, some of our users at work had easy passwords on their email accounts and even though they're rate limited their password got found out and they ended up sending spam.

-____-

and this is why complex passwords should be enforced. but boss is a dumdum.

Franchise1124

I know a ton of people that STILL use password as a password :banghead:

polobunny

Our passwords are encrypted for user safety, but I can use a kernel debugger to intercept the password during the authentication process.
Using "info" as your password for info@acurazine.com is a retarded practice.

Problem is, we're having the backlash of users being dumb, we're the ones having to fight to get our shit unblocked... You can blame users for being stupid, but you can also blame the IT for not having secure practices. But my hands are tied, boss is a control freak.

Franchise1124

Sounds accurate

Ours are encrypted too, but we have so many different applications/systems that may or may not all use that same encryption/authentication so we have to use a separate password JUST for that....that's when everyone starts using Password and mmddyyyy and other stupidness

justnspace

iTrader: (1)

i make up a sentence and then use the first letter of each word for my password.

my work email pass word is: I Pick My Nose Daily.

Franchise1124

Majofo

Bruh.. I've shifted my 401k around. I'm being a intlconservativebitch, but not too concerned. I have a family member closer to retirement age being managed by Edward Jones. I don't know the details, but I know they lost money this past year.. was like

Anyways, it's a small kine acct. Maybe 2-300k.. they mostly get by through a small business they run, both can collect social security at this point. Can they cash out, if so, should I they take monies and maybe reinsert it after the bubble pops? I'm going to go with but not sure if I'm missing something.

and a complex password would be??

polobunny

Yeah you have to be careful not to alienate your users otherwise you end up with shit like that.

Or that.

Majofo

so close.. it's better to just use the whole sentence... really. If you want to make it uber advanced, pick a random cap letter variation.. n+1.

IpIckMynoSedaiLy

polobunny

Anything but 1234 and the fucking username would be better.

justnspace

iTrader: (1)

yep, i have caps and numbers and even an obscure one of these in there "; . :"

So some one looking above my keyboard would be like wtf is Ipmnd.12321A?

Majofo

not really.. I have a basic pw gen that can crack many alphanumeric passwords in short work. There are several very advanced crackers that run in parallel, dictionary, alphanumeric, predefined symbolics.

People who typically create what they believe are secure passwords use the same style, because google / yahoo / etc suggested a certain form is secure.
If someone personally targets you, they'll figure out your significant other's name, dog's name, DOBs, user names, etc and incorporate that in the crack. If they crack one site, they use that pw against other sites. 99% of people think their shit is secure, it's not. It's those that don't have accts or those who stay on top of the security of their accts that stay on top.

An easy way to change your current password and make it more secure is to change the password arrangement to:
could take even the best crackers months if not years to crack. Or create a phrase, could be common, say a favorite rap lyric like:

imj0257

iTrader: (1)

%dk*(F0O+=~3kY$4?

Majofo

copy pasta..

I'm in.. stealing yo nudes.. snatching yo pictures up! Betta hide yo files, hide yo vids, cuz I'm up in here downloading errythang up in herrr!

justnspace

iTrader: (1)

tacobella, learn something!
this is how you be a detective.

not trying to find VIN number...VIN numbers dont even have the previous owners name...

Majofo

you might be surprised how many use their username as their pw as well.. at least for the sites that allow it..

thoiboi

damn :noobs:


I use password1...


password expires in 2 months? password2 it is..







True story.

thoiboi

Frantz, my friend is in investments and he was telling me about that card that gives you a terminal into the stock market. that shit has to be well encrypted.. I forgot the name of it

Franchise1124

Not too many safe havens to run to these days, but people stand a better chance at preserving what they have just by looking - a girl I work with loses thousands everytime the market makes even the slightest moves because she "can't be bothered with checking"

On the Edward Jones thing, they should double-check with their advisor (fine print mumbo jumbo, etc) first but I don't see why they wouldn't be able to cash out. They'll be taxed....then taxed again if they reinvest and cash out later. Other ramifications of course so feel free to PM if you have any other questions


Too late. We have password encrypted voicemail on our desk phones that handled that part already

Majofo

my ninja..

:ladiboi: don't lie.. your pw is penis(inyomouf)

Majofo

https://www.youtube.com/watch?v=C9mfuifkZgc

TacoBello

I seriously have zero interest in doing this kind of "detective" work on anyone.
And on that note, why would anyone go and do this? Stealing, regardless of what it is, is done by the lowest form of human. Seriously. Only pieces of shit steal.

As far as looking into someone's password or some shit, again, not worth my time. I don't sit around writing code to come up with password cracking program, or the likes. Crossing some serious ethical boundaries, if not legal ones also. I don't want to get my shit pushed in by Bubba in prison

Not saying people should be dumb with their passwords either though. There a lot of incredibly stupid passwords. Sorry, but 123456 isnt going to take long to crack

polobunny

Obviously some of the responsibility still falls on the end user, but when you let users have a 4 digit password, no caps, numbers of special characters you're letting them have it easy in being lazy.
The truth is this attack was not directed at specific people. I don't lie when I say we administrate a lot of real estate brokers websites and emails... maybe actually the majority of them in the Quebec province. These emails are found everywhere and it's a matter of time before robots piece it together and try a very quick and simple cracking process.

Anyway, I keep my eye open on the weekdays but I don't work on weekends. As soon as I saw the issue this morning I nulled the few accounts that have been compromised but the damage was already done.

Franchise1124

This.

They recently blocked that practice here at work

Depending on what your friend does, it's most likely Bloomberg Terminal. Extremely secure and even getting a license to use it is pricey

thoiboi

YUP! that's the one!!!


yeah.. he works at one of the big ones.. Starts with P



DO YOU TOO?!




Actually come to think of it, i think there are more than one that starts with a P

polobunny

But honestly it all starts with the D.

Majofo

Moar monies and shit pushin' fo moi.. :thief:

Majofo

On some serious shit.. I see credit card / ssn / pw posted on the daily on some photo host sites. I have no idea why people do it, so they don't forget, or hey let me take a pic to document. Oh shit.. my first CC! Mostly naive women.. and I'm herrr just lookin' fo nudes.

thoiboi

In ibanking, you gotta start somewhere :P


https://www.youtube.com/watch?v=RubBzkZzpUA



Bottom being the D

polobunny

People are retarded.

thoiboi

You're probably referring to this one.





i just saw it last week

Franchise1124

Haha quite a few begin with a P. Industry itself is pretty broad so I can really only guess which one without knowing more about what he does or their actual products. For now I'll just assume P is for Pete's Penis Pump Portfolio, LLC.

What comes first? The D or the V?

thoiboi

THATS THE ONE!!!!


He's a Senior Penis Pumping Master

Majofo

It's like.. you think your home is safe.. but call a locksmith and see how long he's up in yo shit. Like t-minus -10 sexxxxonds. And that's teh polite way to get in. Of course you Canucks never get locked out because that would require you to lock the door in the first place. :thief:

Security is really being an ignorant naive mfr. Get da chopppaaaa!! I will say that embedded security is where it's at. So many exploits to be had, and so few real security experts. If you suckas are wiring up your house and have an integrated home network, especially if that shizz was mfr in China.. KingKongJingDong watching you take a shit and beat yo meat! True story.

Yumcha

Morning.

Yumcha

Cool story. Bro.

Franchise1124

This might be a question for PB....do you use or have you heard of BitLocker?