While Chinese cyber espionage tends to grab the headlines, I was initially drawn to a different statistic in the DBIR: 92% of breaches are perpetuated by outsiders, who mostly rely on unsophisticated attack methods, and go largely undetected for months. Weak, stolen and compromised passwords are the “weak locking mechanism at the front door.”
Many passwords have been divulged and analyzed over the past few years as a result of large scale breaches at RockYou, LinkedIn, Yahoo!, and Gawker (to name a few). How do you keep your password strong, when hackers continue to arm themselves with knowledge of commonly used passwords and patterns?