SOC Type 2 Certified
888.4.NATNET
Facebook Twitter LinkIn Blog Instagram YouTube Google Plus
15
Aug
2014

The False Sense of Security Provided By Complicated Passwords

by Bill

passwords don't always protectFor many years, anyone engaged in any kind of digital transactions has been conditioned to believe it is vitally important to choose long complicated character strings whenever creating a password is required. Sites and business support routinely remind customers to choose at least one lower case, one upper case and one number or punctuation character. In many instances a site will not allow a password choice unless it is at least 7 or 8 characters long and some sites suggest using passwords at least 12 characters long. However, even the longest most convoluted password choice is still capable of being subverted, which makes real Support the most important word in digital security.

As digital security analysts at Hold Security first reported, 1.2 Billion online credentials were compromised by a syndicate of Russian hackers. Target famously admitted to having many thousands of credit card accounts compromised recently as well. The number of new reports about massive account hacking operations continues to skyrocket, often resulting from dubious server security protocols (like merchants storing password information as plain text in some cases) or reactive support teams that address issues after they happen rather than by trying to prevent them.

If a crime syndicate scoops up a billion accounts and their underlying information at the code level, whether the list contains a 7 letter, 14 letter or 144 character password of yours, the complexity of your password choice matters very little. What immediately becomes very important is the security and support provided by your host, the companies you do business with and anyone else in the transaction chain responsible for your accounts.

As Robert McMillan astutely pointed out in an article, “Some of our ideas about passwords date back to the 1980s, when the National Institute of Standards and Technology came up some guidelines for creating secure passwords for local area networks. Back then, they’d mail them out to interested computer security types via U.S. Post. Now, NIST is trying to help the U.S. move beyond the password, says Donna Dodson NIST’s chief cyber security adviser. “Putting the burden of security on the end-user and making it more complex just doesn’t work,” she says. “The security has to be usable for the end-user. Otherwise they’re going to find workarounds.”

At NationalNet we have dedicated decades of time, training and experience along with an equally significant amount of monetary resources to provide the most proactive support for all of our clients. While no hosting company can guarantee a breach is impossible, we can fully guarantee that we take your account security as seriously as you do and that we take many precautions to protect your data in all regards. If a hack is ever attempted against your digital property, it won’t be your use of a semicolon in a password string that saves you from infinite heartache – it will be the professional support staff that has earned your trust by caring for your accounts at every step along the way – before, during or after any threat is detected.

Share and Enjoy
  • Print
  • Facebook
  • Twitter
  • Add to favorites
  • RSS
  • Google Bookmarks
  • Technorati
  • Yahoo! Buzz
NationalNet, Inc., Internet - Web Hosting, Marietta, GA
Apache Linux MySQL Cisco CPanel Intel Wowza