PSA on Passwords

Hya y'all, thought I'd share a 'pro tip' on passwords. If you're concerned about your credentials being compromised and bought/sold on the Dark Web, include a comma in your password. Why? These files of credentials are stored in what is called Comma Separated Value format (example.csv). These are organized in columns, with the information separated by commas. Example below:

Userid, password, date_stolen
JillydillyfromPhilly,Password1234,03/01/2024

This reads as the userid is JillydillyfromPhilly, her password is "Password1234", and the date stolen was March 1 of this year.

When you include a comma in your password, it screws up that record and the information becomes useless. Say that JillydillyfromPhilly changes her password to "Password1,234". If her credentials are hacked, the file would read

JillydillyfromPhilly,Password1,234,03/01/2024 and be interpreted as

Userid=JillydillyfromPhilly, password="Password1", and date stolen is now garbage.

See how that works?

You're welcome. Stay safe online!

-p

If only it were that simple.

Commas are easily stored in CSV files by using quotes. In your example above, that information would be stored like this:
JillydillyfromPhilly,"Password1,234",03/01/2024

Quote:

---

Originally Posted by Transylvania Count

If only it were that simple.

Commas are easily stored in CSV files by using quotes. In your example above, that information would be stored like this:
JillydillyfromPhilly,"Password1,234",03/01/2024

---

Yes, true, but not everyone knows to do that. It's still a good practice, albeit not foolproof.

A better practice is to use different complex passwords for every site and change them often. If you use the same password and email everywhere, your accounts are only as secure as the least secure site. I'd recommend a password manager like 1password, last pass, bit warden, etc to manage a password list.

Using a special character in a password is a good idea, but I don't see a comma doing much since as mentioned text qualifiers are a pretty standard practice.

Use long pass phrases with special characters.

Check out this chart that shows how long it takes a computer program to crack passwords.

Attachment 1374078

We can buy password cracker apps off the interwebz. I bought one last year to recover a file whose password I had forgotten. Did not take long.

That's scary.

Adding a bit to the above …

Consider 2FA in your vital accounts meaning the site sends a text message link to your phone (assuming you control that device) or to your secret non public email.

Best if your login is not your visible handle.

Also valuable is the site always sends you a message noting your login and also displays your last login. Site notifies you failed password attempts, addy changes and other account activity.

Always best practice to have backup accounts unknown to public’s.

There are additional security methods and

Quote:

---

Originally Posted by ck1942

Adding a bit to the above …

Consider 2FA in your vital accounts meaning the site sends a text message link to your phone (assuming you control that device) or to your secret non public email.

Best if your login is not your visible handle.

Also valuable is the site always sends you a message noting your login and also displays your last login. Site notifies you failed password attempts, addy changes and other account activity.

Always best practice to have backup accounts unknown to public’s.

There are additional security methods and

---

I really don’t what else to say about this. Did you kinda just find a way to bash/ complain about this website and then, post it in Co-ed. In all years , that I have been on oh2, I have helped two different members get their password reset/ changed. So, they could get back onto login into their account after an attack. Oh, and one other thing, not to go off topic. ! Please don’t respond to this by complaining about this comment I just wrote because I won’t be making another comment on this thread. Also, because everything I wrote here is true. Ck, hi there ! Would you please close this thread when you get a chance. Hope it is soon. :)