Several online retailers have weak password security!

Retailers makes it easy for hackers!

Dashlane releases their top 100 online Retailers and “The Illusion of Personal Data Security in E-Commerce” this makes it easier for the hackers to know the common passwords for sites.   Some of the retailers that are mentioned are:

• Cafepress (affiliate link) — Although I have been a huge supporter for those really cool shirts and other personable merchandise.   They only require a 3 character password.  If your using a 3 character password, then you are just yelling to the hackers come get my credit card information and personal information!
• Scholastic Inc — This one seem likes they allow this for kids, I just hope they don’t give out all that valuable information.   They two also only require a 3 character password for an account!
• 1-800-flowers (1800flowers.com) — Only requrie a 1 character password, which means that you could use Q for your password and you’d be all set for someone to take your credit card information really quickly.

Those are only the few that I found that were really interesting.   I am calling out these retailers to make changes to their password lengths.  You can see the complete list of the 100 retailers with passwords length and various other data.   This link is thanks to Steve Gibson to see all the important stuff!

Password Length

I’ve talked about Lastpass in the past so I will not talk about it anymore.  I do recommend people use the maximum length you can have on sites that are really important to you.   This will prevent hackers from guessing real simple passwords.   Although you should have Higher, Lower, Numbers, and Special characters in your password to make password guessing even harder.  It is up to you to prevent your account from getting hacked or taken over.   No one can help you but yourself!

Those really BAD passwords you shouldn't use! The list is out for 2013!

Who uses these?

It isn’t everyday that I come across some really interesting passwords.   Among the list of the 25 that Spashdata has released!  The Ones that really stand out for me are: “trustno1” (Gives a new meaning to TNO), Adobe123 and my favorite “photoshop” are on the list of those the top 25 passwords you should NEVER USE.  I don’t know if people are just trying to come up with something no one would think of or if they really want there Facebook Account to be hacked in the first place!

Randomness is everything!

I keep telling people to go check out Lastpass to be safe but it some people will never learn.   I believe in Lastpass so much I pay for the mobile version for a year.   Only 12$ a year but it is for a good cause, and I am really happy with their service!  Lastpass is truely the Last password you will ever have to remember.  

I don’t know about you but I think it is time to go change some passwords! 

How to Secure your Chromebook from threats!

When I first started this journey to find a way to use my chrome book to blog and keep it safe, I just didn’t know how hard it was to switch from Windows or even the Linux system to this! It wasn’t as if I had any choice in the matter. It was in my price range, under 300$ and thus I decided I was going to overcome some of the obstacles of the OS. I’m not saying you shouldn’t buy it but I am saying you need to know what your getting into before you try some of these things.

Click to read more ...

How password security will change in 10 years!

Passwords are going out the Window!

We’ve seen in the past where people have used such words as ninja, jesus, 12345678, and password!  I’ve talked about Lastpass in the past and I really believe they are the best possible combination of the two. With the recent questions of Password Length and Password Strength, I have come to the conclusion that in the coming years.   People will be doing a 3 factor authentication and having the passwords as a back up.   It really would be nice to have two ways to authenticate and not have to put in a password.

3 factor authentication!

I know your Password! Click image to see!Three factor authentication is a simple concept.   Since we have a password we can simply use two other ways to authenticate for example a cell phone and maybe a Yubi Key.  The password will be the backup for one or the other.  If you lost your phone and still would need to authenticate you password would be one you can use in an emergency. Thus it really becomes a 2 factor authentication but since we could use all three to authenticate it would make it that much harder for a hacker to brute force an attack and get your sensitive data.

2 factor authentication!

Although most people don’t think of this but having a limited number of possible access to the important data can make it just that much harder and maybe get the hacker to go somewhere else.   What about social networks?  Do we really need that for social?  I am thinking maybe and it just depends on how you login in the first place.   I would love most of them to to maybe let me authenticate with Google and come back to them but that leaves a large hole.   It just depends on how valuable your social status is and what the possible outcome of someone getting a hold of that social network.  

Elite passwords!

Some would call it “leet” speak,  and I’ve heard people say this is something we should do in reguards to making a password.   I tell you know, we already have a 2,000 most common passwords and I am betting it has some really good leet passwords already.  So what makes a hacker no try those to hack your account.   I would think these would be tried after the primary just because this would also be the easiest way to gain access to an account.

In Ten years!

I am pretty confident in ten years we will see something like this happen and we will no longer be depending on a system that was developed in the late 1990’s.   We have to be ready for change and keep it.  I just hope it happens sooner rather than later and that most companies should jump aboard and help us get this implemented.   I don’t know how hard this will be but it will be nice to not have to worry about a password anymore with my bank or other financial institution. 

Paul Sylvester

Playing around with Google Authenticator and the 2 step process!

2 Factor Authentication and You!

When I started this experiment looking to enhance my security.  I was thinking about Yubi Key but It isn’t like I have the 25 dollars for it.  I do suggest it to anyone who might not have any other options available to you.   It however works really well from what I have been told with Lastpass and I wanted something that would do just that.   

It isn’t like I have a lot of money to throw around!

So I went to Lastpass security settings to see if there was something else.   When I found the Google Authenticator Tab!

Google Authenticator?

Well it looks like Google came up with a way to have a two factor authentication available for you when you login to sites that you may want more than one way to protect your identity or privacy! So even though I could protect my privacy by having a One Time Password it isn’t going to be the easiest way to keep my security safe.  

I installed Google Authenticator on my Kyocera Rise and it is working really well.   I will have to do even more figuring out of this little app but I am wondering how hard it would be to change to another phone when the time comes and how hard it is to get it installed.

I’ve printed up a few One time Passwords and they are safely hidden away for those times I might need them because something happened.

My next step is to find out which if any social media sites are two factor compliant and which ones I would want to have this available to.   I am hopeful that Facebook will have this to help keep my identity safe and people from gaining access to stuff they shouldn’t have.

Lastpass Plus Google Authenticator equals AWESOME.   Even though this just the beginning of my journey into exploring this.   I will do another blog post about this later on when I have explored this with greater detail and discuss the benefits and draw backs of this but for right now I am more secure then I was and I am happy!

Paul Sylvester

Balancing Act between Technology and Lifestyle!

Technology is a Balance!

It isn't everyday that you hear people say that they have to balance work, family, and Technology.   Technology has never been in demand like it has today.    Everyone can say they do it really easily but it isn't always that simple or some would just stretch the truth.   Truth be told no one ever thought it would be this difficult to keep up with technology and keep themselves involved with their kids and work. 

Human Error!

Human error is always going to be a problem because no one can do the job a 100% that being said we have seen in the past where Human error can cause data lose.  That though isn't as big as keeping your data safe from those bad guys that would love to find out all that personal information from your tablet or computer.   Some would say that Facebook has problems too, and I would tend to agree but it isn't the end all to keeping your information safe from Identity Thefts.

Protecting your Data!

I am sure most people will say that it is impossible, I tend to agree but we can at least make it harder for someone to get that data that they want to use against you or just to see what you've been up.   Here are a few things you can do to make it that much harder for someone to get that information!

• Encrypting your Data -- You can do this from several different ways.   It just depends on how you want to proceed.  If your an Android user you have several options to encrypt your device.  I won't go into much detail on how because each device is a little different but you know where you can start!
• Password Manager -- This has been something that I tell people every time I see someone's account being hacked.   If you don't have a strong password than you can't possibly keep people from gaining access.   I suggest using Lastpass and even tell people to invest in Yubikey also!
• Back up your data -- It isn't easy but it is Essential to keep your data backed up because you never really know what will happen and you should always try to keep at least three or four different backup options.   This way if one fails you have a redundancy to help you keep your data from getting lost!

How to Balance Life with Technology!

Here is something you probably are very interested in learning.   I only have one rule when it comes to this and it is something that I have to work at each and every day.   I have come to the conclusion to set time limits on when I use my computer and when I am using technology.   I will not use it all the time and I will not miss being with my kids.   I am sure you have the same problem as me and that is why you were looking for this answer but it isn't like it will help you because it is all about discipline and you only gain that by doing this every day in school, work, or home.  One tip that I can help you with this is, set a limit and slowing each week or day take a minute off until you get to that limit.   It will be a slow process but it will be a rewarding one at the end.

Paul Sylvester

Lastpass still the best there is!

Lastpass had been broken!

In a recent blog post by the Lastpass team, they talked about how they saw data being sucked from one of their servers.   They hit the panic and Paranoia button because they know how important it is for our passwords to be safe.   They have inititated a password reset for some accounts.   There openness only shows me they want to be as plain as possible.   That is why I thought I should at least talk about this recent Lastpass Hack as some would say.  I have said it in the past but I will say it again.   Lastpass is the best there is and I support there efforts a 100 percent.

Lastpass has implemented a forced password on some users!

I’m not saying everyone is effected but if your one of the few who they have forced you to change your password, I would certainly do it.    The most part if your unsure, the best possible advice I could give you right now is to just hold tight.   We know that they working hard to resolve the issues and that you will probably be next in line.   Just hold off until we know more.

Are you in offline mode?

This is the other problem right now with Lastpass but don’t worry.   You can download the proper files needed to keep your self busy while they fix the problem.   I am using Linux but if your need to have access to your Lastpass passwords, go download the offline versions of Lastpass and use them until they have fixed the problems associated with the passwords.    I have installed the Pocket Password from Lastpass on my Kubuntu system without a hitch. This will be a valuable edition for when I am not able to get connected online.

Lastpass I am still a USER and I thank you for your hard work!

Paul Sylvester

Related articles

• LastPass Hack of the Day (geeks.thedailywh.at)


• LastPass Security Breach? (ghacks.net)


• LastPass Says Hackers May Have Stolen Password Data (businessweek.com)


• LastPass Users Urged to Change Their Last Password (techland.time.com)


• The Last News You Want to Hear is LastPass Hacked. Now What? (cloudave.com)


• LastPass forcing members to change passwords (news.cnet.com)


• Use Lastpass? Change your master password asap (sunbeltblog.blogspot.com)