Blog | 1Password

SECURITY
1Password is Ready for John the Ripper
by Jeffrey Goldberg Jul 31, 2012
John the Ripper, the pre-eminent password cracking tool, is getting ready to take on 1Password. Is 1Password ready? Yes! We have been ready for a long time, but you need to do your part by having a good Master Password.
Continue reading
SECURITY
Password reuse strikes again, and a bit closer to home at Dropbox
by Jeffrey Goldberg Jul 31, 2012
Not so long ago, I wrote about a case where attackers were taking passwords that were leaked from one site to go after users on another. In that case, the target was Best Buy. Today’s case hits a bit closer to home for 1Password users, as Dropbox accounts are being attacked using passwords stolen from non-Dropbox sites. Just as no passwords were …
Continue reading
SECURITY
TIPS & ADVICE
Friends don’t let friends reuse passwords
by Jeffrey Goldberg Jul 12, 2012
We’ve written about password reuse before, and we’ll be writing about it again. Password reuse—using the same password for multiple sites or services—is both rampant and dangerous. There is real evidence that people are getting robbed because they are reusing their passwords. Thieves systematically exploit reused password to pay for retail items or …
Continue reading
SECURITY
“Check out my debit card!” Or: why people make bad security choices
by Jeffrey Goldberg Jul 3, 2012
Yes, the stories are true, and no, this isn’t The Onion. People are, once again, displaying their affinity for tweeting photos of things that should never be tweeted. Let’s set the scene and put you in the shoes of a number of today’s (possibly young, possibly naïve) Twitter users: you get your first debit card, you’re excited, you want to tell …
Continue reading
SECURITY
Flames and collisions
by Jeffrey Goldberg Jun 7, 2012
Unless you are a system administrator for a government institution in or around the Middle East you do not need to worry about Flame infecting your computer. Flame (also known as “Flamer” and “skywiper”) itself is not a security concern except to a very narrow, targeted group. Quite simply you don’t need to worry about being infected by Flame, and …
Continue reading
SECURITY
A salt-free diet is bad for your security
by Jeffrey Goldberg Jun 6, 2012
I am not giving anyone health advice. Instead, I’m going to use the example of the recent LinkedIn breach to talk about hashes and salt. Not the food, but the cryptology. Before you dive into this article, you should certainly review the practical advice that Kelly has posted first. Also Kelly’s article has more information about the specific …
Continue reading