Player Features and Ideas Discussion

You mean people are still using passwords that they have to remember?

One Winning Word: KeePass.

FTW.

*boggle*

What? Why?

Well, okay, I suppose it is your perogative, but honestly, free security programs like Keepass are the saving grace for the extremely insecure constraints of usernames and passwords.

You could use a passphrase like Correct Horse Battery Staple as xkcd points out, or use Caha's method (which is similar to what I used before KeePass) but with modern methods, anything based on dictionary words (in any language) or without enough bits (128+) is going to take a dedicated attacker less time to break than it take to train a level 4 skill.

Passwords are like suicide ganking. It's only a matter of how much resources the attacker has to throw at it to kill you.

Using a dictionary word with some leetspeek added to it is the equivalent of taking an totally untanked Hulk with a shipname of 'Hulkageddonists Are W*nkers' and going AFK in the Perimeter asteroid belts.

Using a generated strong password in KeePass is more like using a fully tanked mining Rokh - they can still get you eventually, but it's so much harder that hopefully they won't bother.

rainbow tables.

Cloud computing.

You know you can just rent a stack of servers right and run your malicious stuff on that... kinda like amazon does....

I think you guys are basing this off of the old authentication methods. rainbow tables are alright, but are pretty much hopeless for anything bigger than 7-8 characters.
this is a video I made for a class project.
Password Cracking for dummies
I did actually download the 400GB rainbow table, it's for 7 characters made of any legal password character. I also have an alphanumeric 8 character rainbow table.
as for manually cracking passwords, while it's reasonable, it's not as easy as you guys seem to be implying. to do an 80k word hybrid dictionary attack, it would take my 4.8GHz quad core about 2-3 weeks to process. also, all those words are single words, meaning that putting 2 words together won't be cracked. with windows 7 at least, if you have a 12-14 character password with a good mix of types of characters, it'll be effectively unbreakable for the next few years. and by the time it is reasonably breakable, they will have probably made a better authentication system.
cloud computing is usable, but it's about as bad as my computer since they are generally sitting at about 2-2.5GHz. if you are really up for cracking passwords, renting a botnet for computing is probably your best bet.

maybe for the hybrid dictionary attack. but like I said, as long as you use 12-14 characters, you're pretty much safe for the moment thanks to exponential increase in difficulty.

pretty much everything becomes useless with modern salted passwords. windows doesn't use it, so that still allows you to use rainbow tables on about 95%+ of the market share.

What you want makes extra work for CCP. Hiring extra GM's to deal with your hacked accounts costs them extra money.

If CCP are willing charge you a $5 a month 'I'm a ****** who is more likely to be hacked' surcharge that goes towards hiring more GM's, I think it's a fantastic idea.

Seriously, I want to use hunter2 again.

IB4 'Sandbox' comments?

I just hate having to capitalize letters. I understand it makes the password more secure but given that I make up words for passwords, I'm not too worried about getting hacked.