1. Forum
  2. USENET
  3. alt.privacy

  • Re: RockYou2024 leak of 10 billion passwords - the biggest passwordleak ever

    From Woozy Song@suzyw0ng@outlook.com to comp.mobile.android,alt.os.linux,alt.privacy on Wednesday, July 10, 2024 11:36:35
    From Newsgroup: alt.privacy

    Alan Browne wrote:
    On 2024-07-06 19:28, Mickey D wrote:

    "Threat actors could exploit the RockYou2024 password compilation to
    conduct brute-force attacks and gain unauthorized access to various
    online
    accounts used by individuals who employ passwords included in the
    dataset,"
    the team explained.

    Why Passkeys should be used wherever financial transactions or sensitive information are concerned.  Or at least TFA.

    And passwords need to be strong - computer generated is always best.

    Otherwise password access should have time outs.

    1st time wrong: no delay
    2nd time wrong: 1 s delay
    3rt time wrong: 2 s delay
    4th time wrong: 4 s
    5               8 s

    10              4 hour delay, then reset to 0 delay.

    Brute force login attacks would simply not work.


    My car radio had that in 1990s, enter the PIN wrong and delay increased
    each time.
    --- Synchronet 3.21e-Win32 NewsLink 1.2