thursday revisited

“[a consumer] … recently purchased SimCity 4 thinking that his Athlon 1900 with 1.5 GB of memory and an Nvidia GeForce 4 Ti4600 graphics card would be more than adequate. Instead, he found that after playing for a while, the game ran so sluggishly he could no longer enjoy it.” -wired.com

…anyone care to explain to me why software has such ridiculous requirements these days? Whatever happened to the KISS mantra? (Keep It Simple, Stupid… not something chanted by painted-faced lunatics)

Alright, I’ll give you the latest three-dimensional ray-traced 1280×1024 first-person shooters. But Sim-City? The first SimCity fit on a floppy disc and, aside from a tacky-looking newspaper, was just fine for me. Who has a use for gigatexel buildings? Alpha-transparency strip malls? If the people who sit for hours in front of a screen looking at a city want so much to have the ‘real-world’ experience, perhaps they should consider the notion of visiting a real city. Computers weren’t meant to play games on. They were intended as business machines, machines to automate the redundant parts of life, machines that facilitate communication over a vast global internetwork. It never ceases to annoy me that some of the most powerful computers on the consumer market sit idle or barely scratch the surface of their power as their users play inane games on them. This danger is twofold: First, it promotes an antisocial element (why experience the real world, when I can play God in an irrelevant fake world?) and Secondly, any hacker worth his salt, upon accessing the untold thousands of idle 2GHz+ CPU’s (many on broadband-plus connections) would have, at his command, a formidable army with which he could attack networks, computers, or individuals. Not so long ago, in the days of the nascent 300MHz processor, a security consultant noted that it would take millions of years of computing time to crack the basic 128-bit encryption protecting the vast majority of online transactions. Since computer power is exponential, it’s only a matter of time before computers (en masse… we still have a ways to go before one computer is powerful enough) become powerful enough to lay open the encrypted arteries of the internet. 128-bit security is already shady, and so far there have been no major attempts to up the ante. And the millions-of-years figure is only valid if the passcode to the encrypted target is the absolute last combination that an attacking computer tries. Statistically, this would not be the case. How many important files are protected by inane passwords like ‘password’ or ‘iamcool’?

When selecting a password, it is important to keep security, not convenience, at the forefront. Some tips:

  • Don’t use names of people, things, places, or anything that would easily be associated with you (i.e. I should not use ‘webscout82′)
  • Don’t use normal words of any kind (these are subject to ‘dictionary’ attacks, one of the simplest forms possible)
  • DON’T WRITE YOUR PASSWORD ON A SLIP OF PAPER IN YOUR DESK OR PIN IT TO THE WALL. C’mon, people… think!
  • Do use unintelligble random strings of characters that are notoriously difficult to memorize (unless you forget things easily, then you’re screwed)
  • To make a password that is both easy to remember and reasonably secure, incorporate letters, numbers and if possible, symbols. Varying the case of letters can also enhance security.

    Examples of bad passwords (for the average user):

  • gDAMakaAf92359yaj (too hard to memorize)
  • ;lIngg7 (symbols may not be allowed)
  • jumbojack (unless you’re a waifish vegetarian…)
  • password (don’t laugh… it’s a common password)

    Examples of good passwords (for the average user… these won’t win any security prizes, and system administrators should have better ones):

  • PanaP50sonic
  • PHOmouseNE
  • $luv1000
  • aMillion$s
  • [n8dd77s^ (for those of us that are decent at memorizing random strings)

    Yeah. Felt like ranting. What can we take from this? When making a password, make it a word that's easy to remember, but throw a random number in the middle of it to make it tougher to hack or guess.

    </rant>

  • One thought on “thursday revisited

    1. Naj says:

      Update! Update! Update!

    Leave a Reply

    Your email address will not be published. Required fields are marked *

    *

    You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

    Stop censorship
    Creative Commons Attribution-ShareAlike 3.0 Unported
    This work by scott simpson is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported.