Tuesday, May 02, 2006

Be stupid. Be safe(r).

Not often does someone instigate me to write technical stuff on my blog. I like to keep my blog away from the complexities of compilers, intricacies of the interpreters, profundity of programs and the difficulties associated with databases. I like to keep this piece of the web simple and naive.
But posts like these prompt me to describe my small observations in this [in]secure world of user names and passwords.

How good would it be if no one could crack your password. Because your password is not in the dictionary. It is not one of your pet's, relative's or for that matter your name. And the best part is, it is not tough to remember either. It is not one of the complex capital and small letter combinations.
It does not include vague numbers in between. It neither has weird special characters in it.

Sounds like a perfect fit for all of our innumerable mail accounts, currently abandoned because the passwords were forgotten! Doesn't it?
And what would that password be? Well, it is just a mis-spelt word in the dictionary.

I know, it would take just a small amount of extra time for the crackers to check for all the permutations of the words in the dictionary. And bang, the password is cracked. But what if the cracker is not doing so. What if he is a bit stupid? And what if we are stupid enough not to know the correct spellings. That would make our password safe, without our knowledge.

That means "stupid people who generally misspell words and continue this habit even in choosing passwords are comparatively safe than people who spell words correctly". Sounds like I am re-inventing the wheel. May it be so.

Ignorance is bliss..proved again !

3 comments:

-w said...

Hmm . . . this is a pretty good thought. I think I'll do this the next time I change my passwords (they're long overdue!!)

There's something else that's totally interesting here:
http://www.wired.com/news/technology/0,70726-0.html

I'm sure you're already aware of it.

While reading this post of yours, I thought that maybe you were referring to this technology.

Finally, I'm sure you agree that your idea can't fight phishing.

-w said...

> "c of c, i of the i, p of p, d associated with d"

your playful alliterations <translate> doing pAck </translate>

(used a translate block as I'm not sure about your policy regarding the presence of non-English languages in the comments section of your blog.)

Gopi Krishna said...

I figured I would leave reporting the "new-innovations-in/and-technologies" to the sites/persons who r good at doing so. My blog would better not repeat the same stuff :).

Inka translations antava...manaku alanti policies emi undavu. Nee ishtam inka. ;)