<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Tim Akinbo's Blog &#187; Computer Security</title>
	<atom:link href="http://blog.timakinbo.com/category/computer-security/feed/" rel="self" type="application/rss+xml" />
	<link>http://blog.timakinbo.com</link>
	<description>the web, mobile technology and location based services as I see it</description>
	<lastBuildDate>Sun, 25 Jul 2010 09:26:46 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Your password has been compromised</title>
		<link>http://blog.timakinbo.com/2009/08/29/your-password-has-been-compromised/</link>
		<comments>http://blog.timakinbo.com/2009/08/29/your-password-has-been-compromised/#comments</comments>
		<pubDate>Sat, 29 Aug 2009 01:31:58 +0000</pubDate>
		<dc:creator>Tim</dc:creator>
				<category><![CDATA[Computer Security]]></category>
		<category><![CDATA[password]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blog.timakinbo.com/?p=32</guid>
		<description><![CDATA[Can I see a raise of hand if you use the same password on more than one website? Oh you even use the same password on all websites? Terrible! Have you ever considered what the consequences will be if a rouge web developer attempts to use that same password you used to register on his [...]]]></description>
			<content:encoded><![CDATA[<p>Can I see a raise of hand if you use the same password on more than one website? Oh you even use the same password on all websites? Terrible!</p>
<p>Have you ever considered what the consequences will be if a rouge web developer attempts to use that same password you used to register on his website to login to your email? It could be worse.</p>
<p>The problem is that there are numerous websites out there and though I could say use random passwords, you&#8217;ll soon have to use the <em>password recovery</em> utility on every website you have an account on as you wouldn&#8217;t be able to remember all the passwords.</p>
<p>One solution, is to use a password manager. I&#8217;ll personally recommend <a title="KeePass Password Safe" href="http://keepass.info/" target="_blank">KeePass</a> &#8211; which is a utility that enables you to generate and/or store your passwords securely. It has a number of good security features that even helps to mitigate the activity of key loggers, perhaps they are installed on your system.</p>
<p>Alternatively, I will suggest the use of an online utility like <a href="http://www.hashapass.com/" target="_blank">Hashapass</a>. The reason I&#8217;m excited about this is because it allows you to use a password you remember and combines this with some other information (e.g. the domain name like cnn.com) to generate a hash that can then be used as a password to the site.</p>
<p>If you had an account on say gmail.com, and you used a master password of say <em>jackass</em>, entering in this information into the Hashapass generator will generate the password: <em>y/NTQTnm</em>. Not bad hmm? yahoo.com as the parameter generates <em>DyPh7Z5d</em>. Completely random and very difficult to guess. All you need to remember is your master password. Better still, the <a href="http://www.hashapass.com/bookmarklet.html" target="_blank">bookmarklet</a> will even make it easier to use the service without having to first visit the website.</p>
]]></content:encoded>
			<wfw:commentRss>http://blog.timakinbo.com/2009/08/29/your-password-has-been-compromised/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
