Jump to content


Safer passwords?


  • Please log in to reply
17 replies to this topic

#1 dragonuser767

dragonuser767
  • Guests

Posted 10 October 2012 - 04:57 PM

The simple line
::input::output
I was just thinking , wouldnt this allow you to use a lot saver and very hard to remember passwords on your own PC and prevent more keyloggers then normal?

#2 Guests

  • Guests

Posted 10 October 2012 - 05:01 PM

No, any decent keylogger will monitor "articifial" input as well the clipboard so will hardly help.

#3 dragonuser76

dragonuser76
  • Members
  • 7 posts

Posted 10 October 2012 - 05:12 PM

A decent antivirus will not let any keylogger into your PC so it is a lot saver against random password generators?

#4 Carcophan

Carcophan
  • Members
  • 1568 posts

Posted 10 October 2012 - 05:20 PM

::input::output
I was just thinking , wouldnt this allow you to use a lot safer...


In your example though, 'input' isnt your password. You are making it easier to remember/type your current password, but not making the password itself stronger or safer.

Aside from the normal 'tips':
- At least 1 Upper Case
- At least 1 Lower Case
- At least 1 Character
- At least 1 Number
- Use the maximum available password string length


I have also read that a password like "HorseBatteryCarHat" is harder for a program to crack and easier to remember, than a password like "p@ssw0rD" is, but does not conform to the normal password rulesets that individual sites set up.

#5 dragonuser76

dragonuser76
  • Members
  • 7 posts

Posted 10 October 2012 - 05:26 PM

oh well was nice thinking anyway , being awake for days doesnt help getting "bright" ideas hehe

#6 sumon

sumon
  • Moderators
  • 1307 posts

Posted 10 October 2012 - 07:32 PM

Provided that your AHK script would be secure (file system not breached, malware would not read from memory), you could probably confuse keyloggers by obfuscating the output. The method is used by (and described by) KeePass, and basically decomposes and recombines the output password and sends parts of it using the clipboard.

<!-- m -->http://keepass.info/...bfuscation.html<!-- m -->

#7 guest3456nli

guest3456nli
  • Guests

Posted 10 October 2012 - 09:39 PM

Provided that your AHK script would be secure (file system not breached, malware would not read from memory), you could probably confuse keyloggers by obfuscating the output. The method is used by (and described by) KeePass, and basically decomposes and recombines the output password and sends parts of it using the clipboard.

http://keepass.info/...bfuscation.html


+1
this is what i use

#8 Eedis

Eedis
  • Members
  • 1591 posts

Posted 11 October 2012 - 02:32 AM

A decent antivirus will not let any keylogger into your PC so it is a lot saver against random password generators?

Then why would you make this script in the first place?

#9 Carcophan

Carcophan
  • Members
  • 1568 posts

Posted 11 October 2012 - 05:59 PM

I have best idea yet!!!!


Give ME all your passwords, and I will keep them safe for you. Pen and paper style. Try to hack that state-sponsored-hacking-orginization-people....

#10 dragonuser76

dragonuser76
  • Members
  • 7 posts

Posted 11 October 2012 - 10:36 PM

A decent antivirus will not let any keylogger into your PC so it is a lot saver against random password generators?

Then why would you make this script in the first place?

if you have a keylogger you're screwed no matter what.
if you use this you could use "lala" as a pass on your own machine whilst the actualy pass could be 40 numbers and letters , something hard
this would just be something to make life easyer , just like using it for abbreviations

#11 Eedis

Eedis
  • Members
  • 1591 posts

Posted 12 October 2012 - 01:57 AM


...if you use this you could use "lala" as a pass...

Wow... My wife goes by the name 'Lala', so I was sitting here trying to figure out how the hell you found my wife's name. I'm only guessing you didn't know and that it's pure coincidence. Still ironic and funny.

#12 geekdude

geekdude
  • Members
  • 330 posts

Posted 14 October 2012 - 01:19 PM

I have also read that a password like "HorseBatteryCarHat" is harder for a program to crack and easier to remember, than a password like "p@ssw0rD" is, but does not conform to the normal password rulesets that individual sites set up.


I think that you mean "CorrectHorseBatteryStaple"
<!-- m -->http://xkcd.com/936/<!-- m -->

#13 Carcophan

Carcophan
  • Members
  • 1568 posts

Posted 15 October 2012 - 05:18 PM

I think that you mean "CorrectHorseBatteryStaple"
<!-- m -->http://xkcd.com/936/<!-- m -->

YES! That is it. I've been looking for that info-graphic.

#14 Wingfat

Wingfat
  • Members
  • 932 posts

Posted 16 October 2012 - 07:15 PM

using words in a dictonary is not a good idea, no matter how many words you put together that shouldnt be. the real only way of doing it is Mis Spelling words on purpose.. or changing things like F to Ph...
my best password, i still use to this day, was auto generated by AgeCheck systems when i got signed on as a Porno host webmater. and now my wife uses 1/2 of that long pass for all her sites and such. random letters and numbers that make no since, but i have been using them since 1996 lol

#15 MasterFocus

MasterFocus
  • Moderators
  • 4127 posts

Posted 16 October 2012 - 08:37 PM

I must say it once again: +1 KeePass