Comments on: Analyzing 20,000 MySpace Passwords

By: Me =)

Me =) — Mon, 25 Feb 2008 06:40:37 +0000

wow interesting i read through all the comments which btw took me FOREVER…
but anyways
i was also someone who put “fuckyou” down as my password on a phishing site but i always make it more interesting, i usually put “fuckyouphisher” just to screw em’ up

cmt 89:
Best way to f**k phishing sites is like I do.

Use a password or dictionary with 40 or 50,000 words in it, then custom write a php script to enter data onto the said phishing site.

Soon they have a useless 50-500mb data logged file :)

nice info ima try it next time one pops up :D

and like everyone with common sense has been saying, the passwords without the numbers can most DEFINITLY be real because it didnt start doing the “6letter & x number” requirment until recently.

what i want to know is how the hell you went to the root directory the script was in if it was freaking indexed!!! AND got all those 20,000 emails and passwords in a plain text file too!!! it was INDEXED

By: Joelle

Joelle — Tue, 19 Feb 2008 04:59:16 +0000

My friend’s friend has a list of a couple hundred passwords from myspace…it’s amazing how many people use their own names as their password.

By: Jim

Jim — Sat, 17 Nov 2007 22:44:48 +0000

[quote comment="391"]Interesting, although your final analysis is resting on a (partially, at least) flawed premise: that complexity in passwords makes more of a difference than password length. It simply isn’t true, mathematically speaking. However, if you are only going to have a 7 character password, then by all means make it complex. Otherwise, length is far superior–at 15-20 characters, even with only all lowercase characters a passphrase is easily the way to go.[/quote]
.

Hmm, pretty interesting. I’ve never used any of those passwords and im surprised some of those are considered most common.

By: gullible

gullible — Fri, 02 Nov 2007 23:10:08 +0000

ah man, i’ve actually used one of those passwords in the past!? However, i’ve never fallen for any phishing attempts. That is knowingly.

By: butlimous

butlimous — Wed, 22 Aug 2007 22:20:42 +0000

Thanks for the nice article and statistics!

By: kevin

kevin — Sun, 19 Aug 2007 16:14:50 +0000

[quote comment="26541"]There’s some securtiy measures in place now to prevent phising scams. Internet Explorer 7 verifys sites and warns you of phising istes.[/quote]

By: Kevin

Kevin — Mon, 18 Jun 2007 06:38:35 +0000

There’s some securtiy measures in place now to prevent phising scams. Internet Explorer 7 verifys sites and warns you of phising istes.

By: Jim

Jim — Sun, 03 Jun 2007 19:33:41 +0000

Yep, totally agree ral. Also hover over the link before clicking it and look at the bottom of the window, it’ll show you what it links to and if it is a phishing site it wont be the normal address obviously.

By: ral

ral — Wed, 30 May 2007 04:23:07 +0000

Love the convo…

a good tip for no novices is;

whenever in doubt just type the exact address on the addresses bar…

By: Jim

Jim — Mon, 14 May 2007 23:38:43 +0000

Yep, it is because people fall for them that they happen. Can you blame them though? So many people are clueless when it comes to anything besides sending an e-mail. I guess you can blame them :P

By: Tsee

Tsee — Wed, 09 May 2007 03:53:52 +0000

Actually, Yahoo is a much bigger webmail service than Hotmail, so that sounds correct. AOL and GMail are far behind.

By: air jordan

air jordan — Thu, 26 Apr 2007 08:05:52 +0000

I agree with the general idea that if people didnâ€™t get sucked into phishing scams, there wouldnâ€™t be any. Secure or no, you donâ€™t want to give any passwords awayâ€¦

By: mee

mee — Thu, 08 Mar 2007 06:18:05 +0000

Haha, i remember being one of the people putting fuckyou as a password knowing it was a scam. and not just once but whenever it came up mwuahahahaha =P

By: spammer

spammer — Thu, 01 Feb 2007 02:18:43 +0000

I am a myspace spammer and out of 116 logins i got only 3 were fake and they were all at the same time

By: segamanxero

segamanxero — Wed, 10 Jan 2007 15:02:23 +0000

hey its me again, there is a new form of phishing on myspace now. unfortunately alot of friends that I know got hit by it. The phishing site claims to let you “take a picture with out a camera or scaner”. of course it gives a fake picture, then asks for your myspace login “to put the picture on your profile”. it appers that when it gets your login, it adds a html code to your profile, some weird picture that scrols up and down your profile. when clicked it takes you to the phishing site. also it messagea your friends, to try this cool new thing (links you to the phishing site). as far as i know half of my friends fell for it. i think thats sad, i thought they would be smarter then that…