Page 1 of 2 12 LastLast
Results 1 to 16 of 19

Thread: News - Does Microsoft's Telepathwords know what you will type next?

  1. #1
    HEXUS.admin
    Join Date
    Apr 2005
    Posts
    31,709
    Thanks
    0
    Thanked
    2,073 times in 719 posts

    News - Does Microsoft's Telepathwords know what you will type next?

    Experimental tool is supposed to help prevent weak passwords.
    Read more.

  2. #2
    OilSheikh
    Guest

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    abc123
    Monday1
    TrustNo1

  3. #3
    MCRN Tachi Ttaskmaster's Avatar
    Join Date
    Nov 2013
    Location
    Reading, UK
    Posts
    6,830
    Thanks
    550
    Thanked
    777 times in 651 posts
    • Ttaskmaster's system
      • Motherboard:
      • Asus X99-PRO USB 3.1
      • CPU:
      • i7 5960X o/c to 4.6GHz
      • Memory:
      • 32GB 3200MHz Crucial Ballistix Tactical Tracer RGB DDR4
      • Storage:
      • Samsung Evo 120GB and Seagate Baracuda 2TB
      • Graphics card(s):
      • Gigabyte G1 GTX980Ti
      • PSU:
      • EVGA Supernova G2 1000W
      • Case:
      • Phanteks Enthoo Luxe wiv perspex window
      • Operating System:
      • Win10 64 Home
      • Monitor(s):
      • Acer Predator XB270HU 1440 IPS GSync 144Hz
      • Internet:
      • 900Mbps Gigaclear WHOOOOOOOOOOOO!!!!!!!!

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    What happened to 'God', 'Sex', 'Love' and 'Secret'?

  4. #4
    Senior Member
    Join Date
    Jun 2004
    Location
    Kingdom of Fife (Scotland)
    Posts
    4,991
    Thanks
    393
    Thanked
    220 times in 190 posts
    • crossy's system
      • Motherboard:
      • ASUS Sabertooth X99
      • CPU:
      • Intel 5830k / Noctua NH-D15
      • Memory:
      • 32GB Crucial Ballistix DDR4
      • Storage:
      • 500GB Samsung 850Pro NVMe, 1TB Samsung 850EVO SSD, 1TB Seagate SSHD, 2TB WD Green, 8TB Seagate
      • Graphics card(s):
      • Asus Strix GTX970OC
      • PSU:
      • Corsair AX750 (modular)
      • Case:
      • Coolermaster HAF932 (with wheels)
      • Operating System:
      • Windows 10 Pro 64bit, Ubuntu 16.04LTS
      • Monitor(s):
      • LG Flattron W2361V
      • Internet:
      • VirginMedia 200Mb

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    Might be the wrong thing to say, but I really quite like these kinds of tools as ways to train folks not to use dumb passwords. Remember using GRC's "password haystack" with a cub pack doing their "computer" badge, and them taking great delight in trying to find the shortest and longest crack time passwords.

    As to this one though - I think the presentation could be better - even if it did a traffic light display for the predicted and non-predicted passwords. My default password didn't do very well - I really need to go around and change every account that uses it!
    Quote Originally Posted by Ttaskmaster View Post
    What happened to 'God', 'Sex', 'Love' and 'Secret'?
    That sounds like a tabloid headline.

    Career status: still enjoying my new career in DevOps, but it's keeping me busy...

  5. #5
    Registered+
    Join Date
    Sep 2013
    Posts
    17
    Thanks
    0
    Thanked
    1 time in 1 post
    • Ithilstone's system
      • Motherboard:
      • Asus Z87-A
      • CPU:
      • i7 4770K @4.3
      • Memory:
      • 2x8GB Corsair DDR3 Vengeance Pro Series Silver PC3-12800 CAS 9-9-9-24
      • Storage:
      • 256GB Samsung 840 Pro Series + 6TB SATA HDDs
      • Graphics card(s):
      • MSI GTX 680 PE @1345/3280
      • PSU:
      • Corsair HX850
      • Case:
      • Corsair Obsidian Series 550D
      • Operating System:
      • Win 7 Pro 64bit
      • Monitor(s):
      • Eizo CG223W
      • Internet:
      • VM 30M

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    how to get people willingly submit their most pressures passwords - ohh just ask them !!!

  6. #6
    Registered+
    Join Date
    Sep 2013
    Posts
    17
    Thanks
    0
    Thanked
    1 time in 1 post
    • Ithilstone's system
      • Motherboard:
      • Asus Z87-A
      • CPU:
      • i7 4770K @4.3
      • Memory:
      • 2x8GB Corsair DDR3 Vengeance Pro Series Silver PC3-12800 CAS 9-9-9-24
      • Storage:
      • 256GB Samsung 840 Pro Series + 6TB SATA HDDs
      • Graphics card(s):
      • MSI GTX 680 PE @1345/3280
      • PSU:
      • Corsair HX850
      • Case:
      • Corsair Obsidian Series 550D
      • Operating System:
      • Win 7 Pro 64bit
      • Monitor(s):
      • Eizo CG223W
      • Internet:
      • VM 30M

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    precious not pressures - crap auto correction...
    do I trust M$ to encrypt those passwords? - no
    do I trust M$ to secure this page well enough so no hacker can take control over it - HELL NO!!!

  7. #7
    Admin (Ret'd)
    Join Date
    Jul 2003
    Posts
    18,481
    Thanks
    1,016
    Thanked
    3,208 times in 2,281 posts

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    Answering the question of whether MS knows what I'll type next in a password, no, because if it's a password to anything that matters, it will be generated from a random colle tion of alpha, alphanumeric and other characters. I do NOT use words of any sort, and I keep passwords long enough, and complex enough, to be very hard indeed to crack. Heaven help me if I lose my password list.

  8. #8
    <Insert witty one liner> Kanoe's Avatar
    Join Date
    Dec 2005
    Posts
    941
    Thanks
    89
    Thanked
    99 times in 72 posts
    • Kanoe's system
      • Motherboard:
      • Asus ROG STRIX X299-E GAMING II
      • CPU:
      • Intel 7960X (4.4GHZ All Core)
      • Memory:
      • 32GB Corsair Vengeance PRO (4 x 8GB) 3200
      • Storage:
      • 1x 2TB M.2, 2x 1TB M.2, 960GB SSD, 2TB HDD
      • Graphics card(s):
      • nvidia 3080 FE (1965MHz @906mV +1500 VRAM)
      • PSU:
      • Superflower 1200W
      • Case:
      • Phanteks Enthoo Primo v2
      • Operating System:
      • Win 10 Pro 64bit
      • Monitor(s):
      • 28" ASUS PB287Q 4k + 24" Dell U2412M
      • Internet:
      • Sky @ 60/20

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    Quote Originally Posted by Saracen View Post
    Heaven help me if I lose my password list.
    I'm very sure that you keep your password list under lock and key and very secure but just saying rather than trying to guess your passwords we just need to steal your list instead.

  9. #9
    Registered+
    Join Date
    Sep 2013
    Posts
    56
    Thanks
    0
    Thanked
    3 times in 2 posts

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    Mycatisblackandfurry is a stronger password than a&Tn!0Zm3. Why?

    - Because it has more characters, making it exponentially more difficult to brute force
    - Because it is easier to remember, making it less likely that you will need to write the password down somewhere
    - Because most dictionary attacks do not account for sentence structure, only words next to each other.

  10. #10
    Senior Member
    Join Date
    Jun 2004
    Location
    Kingdom of Fife (Scotland)
    Posts
    4,991
    Thanks
    393
    Thanked
    220 times in 190 posts
    • crossy's system
      • Motherboard:
      • ASUS Sabertooth X99
      • CPU:
      • Intel 5830k / Noctua NH-D15
      • Memory:
      • 32GB Crucial Ballistix DDR4
      • Storage:
      • 500GB Samsung 850Pro NVMe, 1TB Samsung 850EVO SSD, 1TB Seagate SSHD, 2TB WD Green, 8TB Seagate
      • Graphics card(s):
      • Asus Strix GTX970OC
      • PSU:
      • Corsair AX750 (modular)
      • Case:
      • Coolermaster HAF932 (with wheels)
      • Operating System:
      • Windows 10 Pro 64bit, Ubuntu 16.04LTS
      • Monitor(s):
      • LG Flattron W2361V
      • Internet:
      • VirginMedia 200Mb

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    Quote Originally Posted by moeburn View Post
    Mycatisblackandfurry is a stronger password than a&Tn!0Zm3. Why?

    - Because it has more characters, making it exponentially more difficult to brute force
    - Because it is easier to remember, making it less likely that you will need to write the password down somewhere
    - Because most dictionary attacks do not account for sentence structure, only words next to each other.
    Get yourself over to How big is your haystack @GRC. That's got the best explanation why length might beat complexity.

    Oh and "Mycatisblackandfurry2!" is a better password. I'd tend to use the second of your passwords rather than the first merely because I use a password manager so complexity really isn't an issue, but if I come across a dumb site that doesn't allow the full range of character types then, like you, I'd go for something long.

    Career status: still enjoying my new career in DevOps, but it's keeping me busy...

  11. #11
    Member
    Join Date
    Jun 2013
    Posts
    192
    Thanks
    0
    Thanked
    2 times in 2 posts

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    password
    123456
    birth date

    PS. I don't like the name MS used for this - Telepathwords? WTH!!

  12. #12
    Admin (Ret'd)
    Join Date
    Jul 2003
    Posts
    18,481
    Thanks
    1,016
    Thanked
    3,208 times in 2,281 posts

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    Quote Originally Posted by Kanoe View Post
    I'm very sure that you keep your password list under lock and key and very secure but just saying rather than trying to guess your passwords we just need to steal your list instead.
    Erm, no you don't.

    I take your point, but it wouldn't work. For the very reason you give, I'm not going to say much more, but let me just say, I could give you what's written on my password list, and not a single one of the would work, unless you know how to use them. And that isn't written down anywhere. You'd also need to know where to find the "list", and I'd suggest that even if you got the, erm, file, you'd have a major problem accessing it.

    Put it this way. I have some pin numbers written down. But .... in a large block of random numbers, and that block is an aide-memoire. The pin numbers themselves are in there, but hidden. No consecutive 4-digit sequence would produce my pin. It's buried in a way not dissimilar to the old one-time pad encryption method. Unless you know the trick ....

    And, by the way, I very carefully didn't say what those pin numbers are for, but you can take it as read it isn't what most people will have assumed.

    You may not know me very well, Kanoe, but if you did, you'd know if it was as simple as stealing the list, I wouldn't have said what I did in the first place.

  13. #13
    MCRN Tachi Ttaskmaster's Avatar
    Join Date
    Nov 2013
    Location
    Reading, UK
    Posts
    6,830
    Thanks
    550
    Thanked
    777 times in 651 posts
    • Ttaskmaster's system
      • Motherboard:
      • Asus X99-PRO USB 3.1
      • CPU:
      • i7 5960X o/c to 4.6GHz
      • Memory:
      • 32GB 3200MHz Crucial Ballistix Tactical Tracer RGB DDR4
      • Storage:
      • Samsung Evo 120GB and Seagate Baracuda 2TB
      • Graphics card(s):
      • Gigabyte G1 GTX980Ti
      • PSU:
      • EVGA Supernova G2 1000W
      • Case:
      • Phanteks Enthoo Luxe wiv perspex window
      • Operating System:
      • Win10 64 Home
      • Monitor(s):
      • Acer Predator XB270HU 1440 IPS GSync 144Hz
      • Internet:
      • 900Mbps Gigaclear WHOOOOOOOOOOOO!!!!!!!!

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    Quote Originally Posted by crossy View Post
    That sounds like a tabloid headline.
    It's a movie reference to Hackers (1995).
    To see how "Elite" Johnny Lee Miller's character is , the other hackers quiz him on stuff, including asking what the most common passwords are - The above was the answer, which gets mentioned a couple of times in the film.

    Apparently, it was correct at the time of filming, as well...

  14. #14
    Super Nerd
    Join Date
    Jul 2008
    Location
    Cambridge
    Posts
    1,785
    Thanks
    22
    Thanked
    105 times in 72 posts

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    Quote Originally Posted by Ithilstone View Post
    precious not pressures - crap auto correction...
    do I trust M$ to encrypt those passwords? - no
    do I trust M$ to secure this page well enough so no hacker can take control over it - HELL NO!!!
    Seems your autocorrect is also stuck replacing S with $ as well, it's making you look a bit $illy.

  15. #15
    Super Nerd
    Join Date
    Jul 2008
    Location
    Cambridge
    Posts
    1,785
    Thanks
    22
    Thanked
    105 times in 72 posts

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    Quote Originally Posted by Saracen View Post
    Erm, no you don't.

    I take your point, but it wouldn't work. For the very reason you give, I'm not going to say much more, but let me just say, I could give you what's written on my password list, and not a single one of the would work, unless you know how to use them. And that isn't written down anywhere. You'd also need to know where to find the "list", and I'd suggest that even if you got the, erm, file, you'd have a major problem accessing it.

    Put it this way. I have some pin numbers written down. But .... in a large block of random numbers, and that block is an aide-memoire. The pin numbers themselves are in there, but hidden. No consecutive 4-digit sequence would produce my pin. It's buried in a way not dissimilar to the old one-time pad encryption method. Unless you know the trick ....

    And, by the way, I very carefully didn't say what those pin numbers are for, but you can take it as read it isn't what most people will have assumed.

    You may not know me very well, Kanoe, but if you did, you'd know if it was as simple as stealing the list, I wouldn't have said what I did in the first place.
    As you are (metaphorically speaking) the owner of the world's thickest tin-foil helmet I am genuinely shocked you have a list at all. After all the Germans didn't think Enigma could be cracked...

    I'd have assumed you would be using championship memory techniques to remember long sequences of randomly generated characters that you generated on an air-gapped computer that you secure wipe after each use...

  16. #16
    MCRN Tachi Ttaskmaster's Avatar
    Join Date
    Nov 2013
    Location
    Reading, UK
    Posts
    6,830
    Thanks
    550
    Thanked
    777 times in 651 posts
    • Ttaskmaster's system
      • Motherboard:
      • Asus X99-PRO USB 3.1
      • CPU:
      • i7 5960X o/c to 4.6GHz
      • Memory:
      • 32GB 3200MHz Crucial Ballistix Tactical Tracer RGB DDR4
      • Storage:
      • Samsung Evo 120GB and Seagate Baracuda 2TB
      • Graphics card(s):
      • Gigabyte G1 GTX980Ti
      • PSU:
      • EVGA Supernova G2 1000W
      • Case:
      • Phanteks Enthoo Luxe wiv perspex window
      • Operating System:
      • Win10 64 Home
      • Monitor(s):
      • Acer Predator XB270HU 1440 IPS GSync 144Hz
      • Internet:
      • 900Mbps Gigaclear WHOOOOOOOOOOOO!!!!!!!!

    Re: News - Does Microsoft's Telepathwords know what you will type next?

    Quote Originally Posted by kingpotnoodle View Post
    Seems your autocorrect is also stuck replacing S with $ as well, it's making you look a bit $illy.
    No, those are just Micro$oft'$ hidden charges for things. All large businesses have them, apparently. Either that, or they're the hidden profits that allow so many of our companies (my own employer included) to dodge tax payments lately, heh heh!

    Quote Originally Posted by kingpotnoodle View Post
    I'd have assumed you would be using championship memory techniques to remember long sequences of randomly generated characters that you generated on an air-gapped computer that you secure wipe after each use...
    I use things that are memorable to me, the characters for which mean something only to me and are not connected to the memory in any way. Even if you knew me very well (better than my wife, for example), spoke fluent Elvish and Kingon and were able to look through my own eyes at the memory, it'd still make no sense and you'd not find a way to divine the actual passwords.

    Conversely, all this security takes me an hour just to log in to my flippin' email!!

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •