Thursday Sep 9
Dec
05/09
Passwords anyone?
Last Updated on Monday, 14 December 2009 10:55
Written by Davros
Saturday, 5 December 2009 08:12

I have noticed loads of crazy people losing their steam passwords as off late. A few things you should do;

1) Use complex passwords, gone are the days of using simple passwords to secure stuff.

2) Have a good personal security regime.

3) Keep your windows up to date, lots of gamers turn this off don’t.

3) Don’t trust the steam browser, its just a very cut down embedded version of IE.

In another post about computer viruses I have mentioned Firefox and NoScript these 2 things are your best friends, any url your are given in steam open here, between them they have a very good detection rate of web forgery and evil java scripts that try to inject viruses. Passwords are one way to be safe online and offline, allways use mixed case and complex passwords. They can be a mission to remember, keep track of also to think of so most people end up using weak passwords. Password Safe is a tool that allows you to maintain a password protected password list, change the default policy of 8 character passwords to a minimum of 16 characters see the below video to find out why. Make sure you have a backup of the password file!

This video talks about one technique hackers are using to crack passwords, this only talks about cracking legacy windows passwords, but the same principle applies to many other password cracking solutions. Once your password hash is obtained its only a matter of time until some evil little scrote steals your life.


6 Comments
  1. CommentsDDM   |  Saturday, 05 December 2009 at 21:50

    A lot of user’s do not seem to be aware that its not even the password cracking thats getting people accounts stolen but people being phished :/
    i.e. the latest with the fake Steam logon page, and as people thought it was a legit link coming from a friend whos account was stolen.

    Like or Dislike: Thumb up 1 Thumb down 1

  2. Commentsfesta   |  Saturday, 05 December 2009 at 23:46

    I personally would not enter my login details to anything that was abnormally requesting me to do so. Like the emails that are sent out posing to be from your bank… it’s the same concept but in the gaming world now and with gaming accounts.

    Like or Dislike: Thumb up 1 Thumb down 1

  3. CommentsK   |  Sunday, 13 December 2009 at 20:55

    Yeah watch out for phishing people will try send you links that link you to a fake steam community login page in order to gain your details.

    -Kei

    Like or Dislike: Thumb up 1 Thumb down 1

  4. CommentsAyu   |  Friday, 26 February 2010 at 14:39

    Just a wee thing – with Steam’s update, they’ve switched their rendering engine to WebKit, so the last point is probably something you’ll want to update.

    Like or Dislike: Thumb up 0 Thumb down 1

  5. Commentsfesta   |  Saturday, 27 February 2010 at 01:12

    Nah we’ll just do a new review ;o)

    Like or Dislike: Thumb up 0 Thumb down 1

  6. Commentssmed   |  Monday, 23 August 2010 at 23:59

    Just Thought would let you know ive alot of experience with this

    1.) many skids will use fake phinshing site yes you log in sends ur password to a .txt document stored on the site probably be somewhere like http://domain.com./logs.txt > just try many difffrent combinations you will get there in the end cause it is write able if ur stupid enough to enter ur password then find the log just delete your details from the log (and everyone elses)

    2.) Java Drive By this is caused by a java website when u acces the website it asks you to run the site, really all it is doing is downloading a file to your temporay files and runs it, in this case installing a RAT or a password stealer on the Victims computer.

    Like or Dislike: Thumb up 0 Thumb down 0


Leave a Reply

You must be logged in to post a comment.