The highest form of ignorance is when you reject something you don't know anything about.

Wayne Dyer (b 1940)

Gawker Passwords list

~ 230,000 Gawker Passwords

The Gawker Media Hack is a case study on what NOT To Do!
From taunting hackers that obviously know more about computers than the entire Gawker team, Using 30 years old obsolete encryption,  Calling their users and clients "peasants" while being aware that something is obviously wrong, and finally being so damn moronic that even when the account of the CEO is hacked publicly, still wondering what is going on.

Gawker did obviously did not care at all about your security: 
Little excerpt from the campfire chat between Gawker's employees about your security.
Please note that this log was dated July 22, 2010 or roughly 5 months before the public release of the hack.  5 months! They were hacked for 5 months and had "no clues" whatsoever, besides having user names, emails and passwords published in clear.
I think they are in due course to win a Darwin Award.

Excerpt: 

  "uh oh, 3chan is apparently posting usernames and passwords"
  " if it's ours, that's a problem"
  "Gawker users"
  "oh, well. unimportant"
  "Just the peasants?"

























Sources and credit: www.thenextweb.com 

I don't need to re-write how bad it was, this article from Daniel Kennedy explains it very well:   The Real Lessons Of Gawker’s Security Mess
As for me, it took me very little time to crack 15,000 passwords, about 12 minutes to crack 82,600 passwords, and a bit more to crack 200,000 (sorry, I have a slow machine...)
I publish those results for the sake of statistical analysis, and in the hope that you will understand once for all that you need strong and long passwords.

If you don't know why you should, or if you do business on the internet, reading one of the following will probably help you a lot.




Gawker Password list 

Loaded ~635,000 passwords hashes
Guessed ~229,289, About 36% complete
Sorted by Occurrences, Most used first with Rank and count

If you copy, or re-post, please use credits or link it.
Thanks !

Full File  located here

First 1000 (Limited Blogspot space)
Rank, Occurrence, Password

   1: >> 2516: >> 123456
   2: >> 2190: >> password
   3: >> 1205: >> 12345678
   4: >> 782: >> lifehack
   5: >> 696: >> qwerty
   6: >> 499: >> abc123
   7: >> 459: >> 12345
   8: >> 439: >> monkey
   9: >> 413: >> 111111
  10: >> 385: >> consumer
  11: >> 376: >> letmein
  12: >> 351: >> 1234
  13: >> 318: >> dragon
  14: >> 306: >> trustno1
  15: >> 303: >> baseball
  16: >> 302: >> gizmodo
  17: >> 300: >> whatever
  18: >> 297: >> superman
  19: >> 276: >> 1234567
  20: >> 266: >> sunshine
  21: >> 266: >> iloveyou
  22: >> 262: >> fuckyou
  23: >> 256: >> starwars
  24: >> 255: >> shadow
  25: >> 241: >> princess
  26: >> 234: >> cheese
  27: >> 231: >> 123123
  28: >> 229: >> computer
  29: >> 226: >> gawker
  30: >> 223: >> football
  31: >> 204: >> blahblah
  32: >> 203: >> nintendo
  33: >> 199: >> 000000
  34: >> 198: >> soccer
  35: >> 195: >> 654321
  36: >> 193: >> asdfasdf
  37: >> 184: >> master
  38: >> 182: >> passw0rd
  39: >> 182: >> michael
  40: >> 175: >> hello
  41: >> 170: >> kotaku
  42: >> 167: >> pepper
  43: >> 165: >> jennifer
  44: >> 165: >> 666666
  45: >> 164: >> welcome
  46: >> 164: >> buster
  47: >> 161: >> Password
  48: >> 159: >> batman
  49: >> 157: >> maggie
  50: >> 157: >> 1q2w3e4r
  51: >> 154: >> michelle
  52: >> 153: >> killer
  53: >> 153: >> andrew
  54: >> 151: >> pokemon
  55: >> 151: >> internet
  56: >> 149: >> biteme
  57: >> 148: >> orange
  58: >> 148: >> jordan
  59: >> 147: >> ginger
  60: >> 145: >> 123
  61: >> 144: >> aaaaaa
  62: >> 138: >> tigger
  63: >> 137: >> charlie
  64: >> 136: >> chicken
  65: >> 135: >> nothing
  66: >> 132: >> fuckoff
  67: >> 130: >> deadspin
  68: >> 125: >> valleywa
  69: >> 125: >> qwerty12
  70: >> 125: >> george
  71: >> 124: >> swordfis
  72: >> 124: >> summer
  73: >> 122: >> asdf
  74: >> 121: >> matthew
  75: >> 121: >> asdfgh
  76: >> 120: >> mustang
  77: >> 119: >> yankees
  78: >> 117: >> hannah
  79: >> 117: >> asdfghjk
  80: >> 117: >> 1qaz2wsx
  81: >> 116: >> cookie
  82: >> 115: >> purple
  83: >> 115: >> midnight
  84: >> 115: >> 123qwe
  85: >> 114: >> scooter
  86: >> 114: >> banana
  87: >> 113: >> matrix
  88: >> 113: >> jezebel
  89: >> 113: >> daniel
  90: >> 111: >> hunter
  91: >> 111: >> freedom
  92: >> 110: >> secret
  93: >> 110: >> redsox
  94: >> 108: >> spiderma
  95: >> 108: >> phoenix
  96: >> 108: >> joshua
  97: >> 108: >> jessica
  98: >> 108: >> asshole
  99: >> 107: >> william
 100: >> 107: >> qwertyui
 101: >> 107: >> jackson
 102: >> 107: >> foobar
 103: >> 106: >> nicole
 104: >> 106: >> 123321
 105: >> 105: >> peanut
 106: >> 104: >> samantha
 107: >> 104: >> mickey
 108: >> 104: >> booger
 109: >> 103: >> poop
 110: >> 102: >> hockey
 111: >> 100: >> thx1138
 112: >> 100: >> 121212
 113: >> 99: >> ashley
 114: >> 98: >> silver
 115: >> 98: >> gizmodo1
 116: >> 98: >> chocolat
 117: >> 98: >> booboo
 118: >> 97: >> metallic
 119: >> 97: >> 1q2w3e
 120: >> 96: >> bailey
 121: >> 95: >> google
 122: >> 95: >> babygirl
 123: >> 94: >> thomas
 124: >> 94: >> simpsons
 125: >> 94: >> remember
 126: >> 94: >> gateway
 127: >> 93: >> oliver
 128: >> 93: >> monster
 129: >> 92: >> qazwsx
 130: >> 91: >> taylor
 131: >> 91: >> madison
 132: >> 91: >> guitar
 133: >> 91: >> anthony
 134: >> 90: >> justin
 135: >> 90: >> elizabet
 136: >> 90: >> 1111
 137: >> 89: >> november
 138: >> 89: >> monkey12
 139: >> 89: >> drowssap
 140: >> 89: >> bubbles
 141: >> 88: >> startrek
 142: >> 88: >> diamond
 143: >> 88: >> coffee
 144: >> 88: >> butterfly
 145: >> 88: >> brooklyn
 146: >> 88: >> amanda
 147: >> 88: >> adidas
 148: >> 87: >> test
 149: >> 86: >> sparky
 150: >> 86: >> morgan
 151: >> 86: >> merlin
 152: >> 86: >> maverick
 153: >> 86: >> elephant
 154: >> 86: >> asdf1234
 155: >> 86: >> Highlife
 156: >> 85: >> wordpass
 157: >> 85: >> poopoo
 158: >> 85: >> nirvana
 159: >> 85: >> love
 160: >> 85: >> liverpoo
 161: >> 85: >> lauren
 162: >> 84: >> stupid
 163: >> 84: >> chelsea
 164: >> 83: >> compaq
 165: >> 83: >> boomer
 166: >> 82: >> yellow
 167: >> 82: >> sophie
 168: >> 82: >> q1w2e3r4
 169: >> 82: >> coolness
 170: >> 82: >> cocacola
 171: >> 81: >> zxcvbnm
 172: >> 81: >> fucker
 173: >> 81: >> blink182
 174: >> 80: >> snowball
 175: >> 80: >> snoopy
 176: >> 80: >> rachel
 177: >> 80: >> gundam
 178: >> 80: >> alexande
 179: >> 79: >> jasmine
 180: >> 79: >> danielle
 181: >> 79: >> basketba
 182: >> 79: >> 7777777
 183: >> 78: >> thunder
 184: >> 78: >> snickers
 185: >> 78: >> patrick
 186: >> 78: >> darkness
 187: >> 78: >> boston
 188: >> 78: >> abcd1234
 189: >> 77: >> pumpkin
 190: >> 77: >> creative
 191: >> 77: >> 88888888
 192: >> 76: >> smokey
 193: >> 76: >> sample12
 194: >> 76: >> godzilla
 195: >> 76: >> december
 196: >> 76: >> corvette
 197: >> 76: >> bandit
 198: >> 76: >> 123abc
 199: >> 75: >> voodoo
 200: >> 75: >> turtle
 201: >> 75: >> spider
 202: >> 75: >> london
 203: >> 75: >> jonathan
 204: >> 75: >> hello123
 205: >> 75: >> hahaha
 206: >> 75: >> chicago
 207: >> 75: >> brandon
 208: >> 75: >> austin
 209: >> 74: >> tennis
 210: >> 74: >> scooby
 211: >> 74: >> naruto
 212: >> 74: >> mercedes
 213: >> 74: >> maxwell
 214: >> 74: >> fluffy
 215: >> 74: >> eagles
 216: >> 74: >> 11111111
 217: >> 73: >> penguin
 218: >> 73: >> muffin
 219: >> 73: >> bullshit
 220: >> 72: >> jasper
 221: >> 72: >> flower
 222: >> 72: >> ferrari
 223: >> 71: >> steelers
 224: >> 71: >> slipknot
 225: >> 71: >> pookie
 226: >> 71: >> murphy
 227: >> 71: >> joseph
 228: >> 71: >> calvin
 229: >> 71: >> apples
 230: >> 71: >> 159753
 231: >> 70: >> tucker
 232: >> 70: >> martin
 233: >> 70: >> 11235813
 234: >> 69: >> whocares
 235: >> 69: >> pineappl
 236: >> 69: >> nicholas
 237: >> 69: >> jackass
 238: >> 69: >> goober
 239: >> 69: >> chester
 240: >> 69: >> 8675309
 241: >> 69: >> 222222
 242: >> 68: >> winston
 243: >> 68: >> please
 244: >> 68: >> dakota
 245: >> 68: >> 112233
 246: >> 67: >> wonkette
 247: >> 67: >> somethin
 248: >> 67: >> rosebud
 249: >> 67: >> dallas
 250: >> 67: >> 696969
 251: >> 66: >> shithead
 252: >> 66: >> popcorn
 253: >> 66: >> peaches
 254: >> 66: >> pakistan
 255: >> 66: >> dexter
 256: >> 66: >> canada
 257: >> 65: >> victoria
 258: >> 65: >> rockstar
 259: >> 65: >> qwe123
 260: >> 65: >> newyork
 261: >> 65: >> nathan
 262: >> 65: >> lovely
 263: >> 65: >> forever
 264: >> 65: >> benjamin
 265: >> 64: >> robert
 266: >> 64: >> pickle
 267: >> 64: >> passport
 268: >> 64: >> mother
 269: >> 64: >> harley
 270: >> 64: >> falcon
 271: >> 63: >> trinity
 272: >> 63: >> barney
 273: >> 62: >> willow
 274: >> 62: >> ncc1701
 275: >> 62: >> kitten
 276: >> 62: >> jesus
 277: >> 62: >> hacker
 278: >> 62: >> fuckyou2
 279: >> 62: >> fender
 280: >> 62: >> butter
 281: >> 61: >> wolverin
 282: >> 61: >> samsung
 283: >> 61: >> rush2112
 284: >> 61: >> pa55word
 285: >> 61: >> lalala
 286: >> 61: >> christin
 287: >> 60: >> yourmom
 288: >> 60: >> westside
 289: >> 60: >> rocket
 290: >> 60: >> melissa
 291: >> 60: >> icecream
 292: >> 60: >> casper
 293: >> 59: >> spooky
 294: >> 59: >> random
 295: >> 59: >> prince
 296: >> 59: >> mookie
 297: >> 59: >> greenday
 298: >> 59: >> cooper
 299: >> 58: >> hello1
 300: >> 58: >> guinness
 301: >> 58: >> gamecube
 302: >> 58: >> diablo
 303: >> 58: >> arsenal
 304: >> 58: >> 999999
 305: >> 58: >> 98765432
 306: >> 58: >> 333333
 307: >> 58: >> 131313
 308: >> 58: >> 00000000
 309: >> 57: >> xbox360
 310: >> 57: >> school
 311: >> 57: >> iceman
 312: >> 57: >> goldfish
 313: >> 57: >> friends
 314: >> 57: >> 555555
 315: >> 56: >> winter
 316: >> 56: >> welcome1
 317: >> 56: >> qaz159
 318: >> 56: >> porsche
 319: >> 56: >> monkey1
 320: >> 56: >> kermit
 321: >> 56: >> jackie
 322: >> 56: >> hardcore
 323: >> 56: >> donkey
 324: >> 55: >> success
 325: >> 55: >> richard
 326: >> 55: >> redrum
 327: >> 55: >> rainbow
 328: >> 55: >> poohbear
 329: >> 55: >> jordan23
 330: >> 55: >> heather
 331: >> 55: >> fireball
 332: >> 55: >> dietcoke
 333: >> 55: >> access
 334: >> 54: >> warcraft
 335: >> 54: >> skippy
 336: >> 54: >> ranger
 337: >> 54: >> radiohea
 338: >> 54: >> qwerty1
 339: >> 54: >> qwer1234
 340: >> 54: >> michael1
 341: >> 54: >> drpepper
 342: >> 54: >> destiny
 343: >> 54: >> cowboy
 344: >> 54: >> changeme
 345: >> 53: >> xxxxxx
 346: >> 53: >> slayer
 347: >> 53: >> sierra
 348: >> 53: >> rabbit
 349: >> 53: >> panther
 350: >> 53: >> mountain
 351: >> 53: >> louise
 352: >> 53: >> eminem
 353: >> 53: >> carolina
 354: >> 53: >> asdasd
 355: >> 52: >> testing
 356: >> 52: >> lakers
 357: >> 52: >> kitty
 358: >> 52: >> gemini
 359: >> 52: >> gandalf
 360: >> 52: >> dragonba
 361: >> 52: >> brandy
 362: >> 52: >> apple
 363: >> 52: >> 1qazxsw2
 364: >> 52: >> 123654
 365: >> 51: >> pikachu
 366: >> 51: >> miller
 367: >> 51: >> maryjane
 368: >> 51: >> lacrosse
 369: >> 51: >> jessie
 370: >> 51: >> hotdog
 371: >> 51: >> helpme
 372: >> 51: >> buddha
 373: >> 51: >> angels
 374: >> 50: >> test123
 375: >> 50: >> supersta
 376: >> 50: >> skywalke
 377: >> 50: >> septembe
 378: >> 50: >> ncc1701d
 379: >> 50: >> money
 380: >> 50: >> lollipop
 381: >> 50: >> letmein1
 382: >> 50: >> hammer
 383: >> 50: >> dolphin
 384: >> 50: >> digital
 385: >> 50: >> cherry
 386: >> 50: >> charlie1
 387: >> 50: >> america
 388: >> 49: >> wizard
 389: >> 49: >> windows
 390: >> 49: >> williams
 391: >> 49: >> vegeta
 392: >> 49: >> tigers
 393: >> 49: >> spencer
 394: >> 49: >> q1w2e3
 395: >> 49: >> precious
 396: >> 49: >> platinum
 397: >> 49: >> online
 398: >> 49: >> madonna
 399: >> 49: >> johnny
 400: >> 49: >> garfield
 401: >> 49: >> einstein
 402: >> 49: >> cassie
 403: >> 49: >> andrea
 404: >> 49: >> Passw0rd
 405: >> 48: >> zombie
 406: >> 48: >> spanky
 407: >> 48: >> reggie
 408: >> 48: >> pa55w0rd
 409: >> 48: >> logitech
 410: >> 48: >> liberty
 411: >> 48: >> legend
 412: >> 48: >> infinity
 413: >> 48: >> indian
 414: >> 48: >> green
 415: >> 48: >> eclipse
 416: >> 48: >> dilbert
 417: >> 48: >> cowboys
 418: >> 48: >> cartman
 419: >> 48: >> californ
 420: >> 48: >> boscoe01
 421: >> 47: >> scarface
 422: >> 47: >> rebecca
 423: >> 47: >> microsof
 424: >> 47: >> gracie
 425: >> 47: >> family
 426: >> 47: >> bulldog
 427: >> 47: >> bond007
 428: >> 47: >> bobafett
 429: >> 47: >> 1234qwer
 430: >> 46: >> warrior
 431: >> 46: >> travis
 432: >> 46: >> sunflowe
 433: >> 46: >> stella
 434: >> 46: >> spongebo
 435: >> 46: >> shannon
 436: >> 46: >> playstat
 437: >> 46: >> montana
 438: >> 46: >> jupiter
 439: >> 46: >> junior
 440: >> 46: >> james
 441: >> 46: >> indigo
 442: >> 46: >> iloveu
 443: >> 46: >> happy
 444: >> 46: >> dolphins
 445: >> 46: >> catch22
 446: >> 46: >> butthead
 447: >> 46: >> baxter
 448: >> 46: >> 0000
 449: >> 45: >> tinkerbe
 450: >> 45: >> therock
 451: >> 45: >> suckit
 452: >> 45: >> scoobydo
 453: >> 45: >> rascal
 454: >> 45: >> olivia
 455: >> 45: >> norman
 456: >> 45: >> golden
 457: >> 45: >> fuckme
 458: >> 45: >> franklin
 459: >> 45: >> fantasy
 460: >> 45: >> david
 461: >> 45: >> courtney
 462: >> 45: >> beatles
 463: >> 45: >> alexandr
 464: >> 45: >> 232323
 465: >> 44: >> veronica
 466: >> 44: >> starcraf
 467: >> 44: >> shelby
 468: >> 44: >> saturn
 469: >> 44: >> sakura
 470: >> 44: >> raiders
 471: >> 44: >> mypasswo
 472: >> 44: >> metalgea
 473: >> 44: >> loveme
 474: >> 44: >> lizard
 475: >> 44: >> hummer
 476: >> 44: >> giants
 477: >> 44: >> charles
 478: >> 44: >> caroline
 479: >> 44: >> bubba
 480: >> 44: >> bigdog
 481: >> 44: >> 55555
 482: >> 44: >> 12341234
 483: >> 43: >> yamaha
 484: >> 43: >> xavier
 485: >> 43: >> virginia
 486: >> 43: >> twilight
 487: >> 43: >> stargate
 488: >> 43: >> softball
 489: >> 43: >> simple
 490: >> 43: >> red123
 491: >> 43: >> people
 492: >> 43: >> m0nkey
 493: >> 43: >> jamesbon
 494: >> 43: >> inuyasha
 495: >> 43: >> halflife
 496: >> 43: >> friday
 497: >> 43: >> deftones
 498: >> 43: >> charlott
 499: >> 43: >> blah
 500: >> 43: >> arthur
 501: >> 43: >> abcdefg
 502: >> 43: >> P@ssw0rd
 503: >> 42: >> sublime
 504: >> 42: >> samson
 505: >> 42: >> sabrina
 506: >> 42: >> moose
 507: >> 42: >> moocow
 508: >> 42: >> monica
 509: >> 42: >> lovers
 510: >> 42: >> lovelove
 511: >> 42: >> justice
 512: >> 42: >> fuck
 513: >> 42: >> enigma
 514: >> 42: >> dreamcas
 515: >> 42: >> crystal
 516: >> 42: >> cooldude
 517: >> 42: >> christop
 518: >> 42: >> carmen
 519: >> 42: >> cardinal
 520: >> 42: >> buttercu
 521: >> 42: >> blue
 522: >> 42: >> asdfjkl
 523: >> 42: >> american
 524: >> 41: >> sydney
 525: >> 41: >> patches
 526: >> 41: >> megaman
 527: >> 41: >> jeremy
 528: >> 41: >> isabella
 529: >> 41: >> happy1
 530: >> 41: >> gizmo
 531: >> 41: >> edward
 532: >> 41: >> christia
 533: >> 41: >> bob
 534: >> 41: >> billybob
 535: >> 41: >> bastard
 536: >> 41: >> august
 537: >> 41: >> abcdef
 538: >> 41: >> a123456
 539: >> 41: >> 987654
 540: >> 41: >> 444444
 541: >> 40: >> steven
 542: >> 40: >> pass1234
 543: >> 40: >> pass
 544: >> 40: >> p4ssw0rd
 545: >> 40: >> mitchell
 546: >> 40: >> kittycat
 547: >> 40: >> ireland
 548: >> 40: >> hobbes
 549: >> 40: >> goddess
 550: >> 40: >> genius
 551: >> 40: >> fuckyou1
 552: >> 40: >> dude
 553: >> 40: >> cupcake
 554: >> 40: >> comment
 555: >> 40: >> champion
 556: >> 40: >> awesome
 557: >> 40: >> abcdefgh
 558: >> 39: >> zzzzzz
 559: >> 39: >> zxcvbn
 560: >> 39: >> testtest
 561: >> 39: >> tacobell
 562: >> 39: >> superfly
 563: >> 39: >> skittles
 564: >> 39: >> serenity
 565: >> 39: >> savannah
 566: >> 39: >> redskins
 567: >> 39: >> pirate
 568: >> 39: >> pickles
 569: >> 39: >> phantom
 570: >> 39: >> pearljam
 571: >> 39: >> parker
 572: >> 39: >> paradise
 573: >> 39: >> none
 574: >> 39: >> natalie
 575: >> 39: >> jesus1
 576: >> 39: >> jellybea
 577: >> 39: >> ihateyou
 578: >> 39: >> danger
 579: >> 39: >> chicken1
 580: >> 39: >> cameron
 581: >> 39: >> beavis
 582: >> 39: >> asd123
 583: >> 39: >> alexis
 584: >> 39: >> a1234567
 585: >> 39: >> 777777
 586: >> 38: >> winnie
 587: >> 38: >> winner
 588: >> 38: >> weezer
 589: >> 38: >> tweety
 590: >> 38: >> timosha
 591: >> 38: >> skater
 592: >> 38: >> shorty
 593: >> 38: >> scorpio
 594: >> 38: >> redwings
 595: >> 38: >> rangers
 596: >> 38: >> ragnarok
 597: >> 38: >> packers
 598: >> 38: >> moomoo
 599: >> 38: >> michigan
 600: >> 38: >> mercury
 601: >> 38: >> marshall
 602: >> 38: >> marlboro
 603: >> 38: >> magic
 604: >> 38: >> lasvegas
 605: >> 38: >> kenshin
 606: >> 38: >> idontkno
 607: >> 38: >> hollywoo
 608: >> 38: >> firebird
 609: >> 38: >> element
 610: >> 38: >> dickhead
 611: >> 38: >> copper
 612: >> 38: >> cool
 613: >> 38: >> chickens
 614: >> 37: >> zeppelin
 615: >> 37: >> yousuck
 616: >> 37: >> wombat
 617: >> 37: >> vanessa
 618: >> 37: >> valentin
 619: >> 37: >> tiger
 620: >> 37: >> tester
 621: >> 37: >> stinky
 622: >> 37: >> spitfire
 623: >> 37: >> sammy
 624: >> 37: >> qqqqqq
 625: >> 37: >> passion
 626: >> 37: >> nelson
 627: >> 37: >> nascar
 628: >> 37: >> mexico
 629: >> 37: >> meowmeow
 630: >> 37: >> loser
 631: >> 37: >> knight
 632: >> 37: >> kimberly
 633: >> 37: >> killa01
 634: >> 37: >> iphone
 635: >> 37: >> genesis
 636: >> 37: >> enterpri
 637: >> 37: >> domino
 638: >> 37: >> darkside
 639: >> 37: >> cricket
 640: >> 37: >> chichi
 641: >> 37: >> bulldogs
 642: >> 36: >> yahoo
 643: >> 36: >> willie
 644: >> 36: >> stephani
 645: >> 36: >> sandman
 646: >> 36: >> okies
 647: >> 36: >> margaret
 648: >> 36: >> lolita
 649: >> 36: >> hotmail
 650: >> 36: >> heaven
 651: >> 36: >> goblue
 652: >> 36: >> flowers
 653: >> 36: >> duncan
 654: >> 36: >> dennis
 655: >> 36: >> cracker
 656: >> 36: >> cookies
 657: >> 36: >> chance
 658: >> 36: >> athena
 659: >> 36: >> anderson
 660: >> 36: >> 888888
 661: >> 36: >> 11111
 662: >> 35: >> tyler
 663: >> 35: >> theone
 664: >> 35: >> theman
 665: >> 35: >> stimpy
 666: >> 35: >> qwaszx
 667: >> 35: >> pass123
 668: >> 35: >> orlando
 669: >> 35: >> mozart
 670: >> 35: >> maddie
 671: >> 35: >> longhorn
 672: >> 35: >> lightnin
 673: >> 35: >> ladybug
 674: >> 35: >> kathleen
 675: >> 35: >> hellokit
 676: >> 35: >> hellfire
 677: >> 35: >> gibson
 678: >> 35: >> froggy
 679: >> 35: >> freddy
 680: >> 35: >> florida
 681: >> 35: >> discover
 682: >> 35: >> colorado
 683: >> 35: >> carter
 684: >> 35: >> brutus
 685: >> 35: >> blowme
 686: >> 35: >> bitch
 687: >> 35: >> asdf123
 688: >> 35: >> angela
 689: >> 35: >> 87654321
 690: >> 35: >> 101010
 691: >> 34: >> walter
 692: >> 34: >> vision
 693: >> 34: >> toyota
 694: >> 34: >> sterling
 695: >> 34: >> speedy
 696: >> 34: >> smiley
 697: >> 34: >> skyline
 698: >> 34: >> qazwsxed
 699: >> 34: >> psycho
 700: >> 34: >> pavilion
 701: >> 34: >> oicu812
 702: >> 34: >> october
 703: >> 34: >> marley
 704: >> 34: >> kramer
 705: >> 34: >> johnson
 706: >> 34: >> jester
 707: >> 34: >> hithere
 708: >> 34: >> fuckthis
 709: >> 34: >> frankie
 710: >> 34: >> engineer
 711: >> 34: >> empire
 712: >> 34: >> electric
 713: >> 34: >> dancer
 714: >> 34: >> daisy
 715: >> 34: >> cificap
 716: >> 34: >> chandler
 717: >> 34: >> bollocks
 718: >> 34: >> atlantis
 719: >> 33: >> zaq12wsx
 720: >> 33: >> yomama
 721: >> 33: >> wutang
 722: >> 33: >> wicked
 723: >> 33: >> trixie
 724: >> 33: >> southpar
 725: >> 33: >> shamrock
 726: >> 33: >> reddog
 727: >> 33: >> punkrock
 728: >> 33: >> player
 729: >> 33: >> picard
 730: >> 33: >> nissan
 731: >> 33: >> matthew1
 732: >> 33: >> manchest
 733: >> 33: >> hottie
 734: >> 33: >> freedom1
 735: >> 33: >> disney
 736: >> 33: >> coolio
 737: >> 33: >> claire
 738: >> 33: >> camaro
 739: >> 33: >> buttons
 740: >> 33: >> blabla
 741: >> 33: >> 123456a
 742: >> 32: >> wildcats
 743: >> 32: >> voyager
 744: >> 32: >> vampire
 745: >> 32: >> ultimate
 746: >> 32: >> trunks
 747: >> 32: >> timothy
 748: >> 32: >> system
 749: >> 32: >> stephen
 750: >> 32: >> sexy
 751: >> 32: >> sesame
 752: >> 32: >> samuel
 753: >> 32: >> qweasd
 754: >> 32: >> pyramid
 755: >> 32: >> power
 756: >> 32: >> poopie
 757: >> 32: >> police
 758: >> 32: >> playboy
 759: >> 32: >> phoebe
 760: >> 32: >> peewee
 761: >> 32: >> peekaboo
 762: >> 32: >> pandora
 763: >> 32: >> loveyou
 764: >> 32: >> jaguar
 765: >> 32: >> indiana
 766: >> 32: >> harrison
 767: >> 32: >> groovy
 768: >> 32: >> gawker1
 769: >> 32: >> fuckit
 770: >> 32: >> doodle
 771: >> 32: >> burton
 772: >> 32: >> boogie
 773: >> 32: >> bonnie
 774: >> 32: >> beagle
 775: >> 32: >> barcelon
 776: >> 32: >> barbie
 777: >> 32: >> bambam
 778: >> 32: >> albert
 779: >> 32: >> PASSWORD
 780: >> 32: >> 147258
 781: >> 31: >> wallace
 782: >> 31: >> thuglife
 783: >> 31: >> tanner
 784: >> 31: >> swimming
 785: >> 31: >> starbuck
 786: >> 31: >> spike
 787: >> 31: >> smiles
 788: >> 31: >> scotland
 789: >> 31: >> scorpion
 790: >> 31: >> sapphire
 791: >> 31: >> raptor
 792: >> 31: >> porsche9
 793: >> 31: >> peace
 794: >> 31: >> okokok
 795: >> 31: >> mynameis
 796: >> 31: >> mushroom
 797: >> 31: >> montreal
 798: >> 31: >> monday
 799: >> 31: >> molly
 800: >> 31: >> mississi
 801: >> 31: >> megatron
 802: >> 31: >> maximus
 803: >> 31: >> maddog
 804: >> 31: >> lucky
 805: >> 31: >> jessica1
 806: >> 31: >> jarvis
 807: >> 31: >> insane
 808: >> 31: >> hitman
 809: >> 31: >> hamlet
 810: >> 31: >> hamilton
 811: >> 31: >> gordon
 812: >> 31: >> gabriel
 813: >> 31: >> francis
 814: >> 31: >> fleshbot
 815: >> 31: >> finalfan
 816: >> 31: >> explorer
 817: >> 31: >> evangeli
 818: >> 31: >> eagle1
 819: >> 31: >> dreams
 820: >> 31: >> dingdong
 821: >> 31: >> debbie
 822: >> 31: >> chris
 823: >> 31: >> chipper
 824: >> 31: >> brooke
 825: >> 31: >> brittany
 826: >> 31: >> bigdaddy
 827: >> 31: >> angel
 828: >> 31: >> amazon
 829: >> 31: >> allison
 830: >> 31: >> aardvark
 831: >> 31: >> 11223344
 832: >> 30: >> zachary
 833: >> 30: >> watermel
 834: >> 30: >> victor
 835: >> 30: >> veritas
 836: >> 30: >> unicorn
 837: >> 30: >> sweetie
 838: >> 30: >> starfish
 839: >> 30: >> squirrel
 840: >> 30: >> shit
 841: >> 30: >> satan666
 842: >> 30: >> sarah
 843: >> 30: >> runner
 844: >> 30: >> rockon
 845: >> 30: >> redhead
 846: >> 30: >> predator
 847: >> 30: >> pooppoop
 848: >> 30: >> personal
 849: >> 30: >> patriots
 850: >> 30: >> newlife
 851: >> 30: >> mookie12
 852: >> 30: >> minnie
 853: >> 30: >> metroid
 854: >> 30: >> lucky1
 855: >> 30: >> krishna
 856: >> 30: >> immortal
 857: >> 30: >> homer
 858: >> 30: >> highland
 859: >> 30: >> gogogo
 860: >> 30: >> friend
 861: >> 30: >> fred
 862: >> 30: >> firefly
 863: >> 30: >> elvis
 864: >> 30: >> connor
 865: >> 30: >> christ
 866: >> 30: >> cherokee
 867: >> 30: >> catherin
 868: >> 30: >> bunghole
 869: >> 30: >> brazil
 870: >> 30: >> blizzard
 871: >> 30: >> bigboy
 872: >> 30: >> alaska
 873: >> 30: >> 789456
 874: >> 30: >> 420420
 875: >> 30: >> 1passwor
 876: >> 30: >> 12qwaszx
 877: >> 30: >> 1234abcd
 878: >> 30: >> 102030
 879: >> 29: >> writer
 880: >> 29: >> wookie
 881: >> 29: >> wolfpack
 882: >> 29: >> wilson
 883: >> 29: >> william1
 884: >> 29: >> trouble
 885: >> 29: >> toshiba
 886: >> 29: >> thursday
 887: >> 29: >> teddybea
 888: >> 29: >> techno
 889: >> 29: >> star
 890: >> 29: >> skipper
 891: >> 29: >> sephirot
 892: >> 29: >> revoluti
 893: >> 29: >> potter
 894: >> 29: >> pokemon1
 895: >> 29: >> pizza
 896: >> 29: >> penguins
 897: >> 29: >> pencil
 898: >> 29: >> passwerd
 899: >> 29: >> p@ssw0rd
 900: >> 29: >> noodle
 901: >> 29: >> music
 902: >> 29: >> moonligh
 903: >> 29: >> mongoose
 904: >> 29: >> millie
 905: >> 29: >> marvin
 906: >> 29: >> justdoit
 907: >> 29: >> hi
 908: >> 29: >> hershey
 909: >> 29: >> garcia
 910: >> 29: >> future
 911: >> 29: >> esther
 912: >> 29: >> darkstar
 913: >> 29: >> dammit
 914: >> 29: >> christma
 915: >> 29: >> buffalo
 916: >> 29: >> buddy
 917: >> 29: >> bobbob
 918: >> 29: >> asdfg
 919: >> 29: >> angel1
 920: >> 29: >> alex
 921: >> 29: >> adrian
 922: >> 28: >> wolfgang
 923: >> 28: >> wingzero
 924: >> 28: >> weasel
 925: >> 28: >> wanker
 926: >> 28: >> vincent
 927: >> 28: >> vanilla
 928: >> 28: >> test1234
 929: >> 28: >> stanley
 930: >> 28: >> spirit
 931: >> 28: >> spartan
 932: >> 28: >> snapple
 933: >> 28: >> scarlett
 934: >> 28: >> renegade
 935: >> 28: >> pimpin
 936: >> 28: >> perfect
 937: >> 28: >> patricia
 938: >> 28: >> pamela
 939: >> 28: >> packard
 940: >> 28: >> ou812
 941: >> 28: >> opensesa
 942: >> 28: >> noodles
 943: >> 28: >> nigger
 944: >> 28: >> morrison
 945: >> 28: >> magnolia
 946: >> 28: >> loverboy
 947: >> 28: >> laptop
 948: >> 28: >> kingkong
 949: >> 28: >> keyboard
 950: >> 28: >> katherin
 951: >> 28: >> john
 952: >> 28: >> insecure
 953: >> 28: >> grendel
 954: >> 28: >> golfer
 955: >> 28: >> gizmodo2
 956: >> 28: >> fossil
 957: >> 28: >> flamingo
 958: >> 28: >> eugene
 959: >> 28: >> eatshit
 960: >> 28: >> download
 961: >> 28: >> doctor
 962: >> 28: >> crimson
 963: >> 28: >> coltrane
 964: >> 28: >> carpedie
 965: >> 28: >> captain
 966: >> 28: >> boomboom
 967: >> 28: >> blessed
 968: >> 28: >> biscuit
 969: >> 28: >> babydoll
 970: >> 28: >> aurora
 971: >> 28: >> audrey
 972: >> 28: >> assassin
 973: >> 28: >> animal
 974: >> 28: >> 321321
 975: >> 28: >> 314159
 976: >> 28: >> 1212
 977: >> 28: >> 09876543
 978: >> 28: >> 007007
 979: >> 27: >> tristan
 980: >> 27: >> thumper
 981: >> 27: >> sweetpea
 982: >> 27: >> spartan1
 983: >> 27: >> socrates
 984: >> 27: >> sniper
 985: >> 27: >> shalom
 986: >> 27: >> shadow1
 987: >> 27: >> sebastia
 988: >> 27: >> rootbeer
 989: >> 27: >> roland
 990: >> 27: >> potato
 991: >> 27: >> piglet
 992: >> 27: >> number1
 993: >> 27: >> nugget
 994: >> 27: >> nightmar
 995: >> 27: >> monkeys
 996: >> 27: >> masamune
 997: >> 27: >> marcus
 998: >> 27: >> lucifer
 999: >> 27: >> leslie
1000: >> 27: >> lawrence

Create a Real Password! You Dummy!

Here we go again... 

Some time ago, TJMAXX companies woke up with a hangover: 130 million Credit Card number stolen.  The Reason?   Obsolete security and pure greed. They used "WEP", WPA was "too expensive"
Then, The Hotmail hack and the Rockyou list: 32 million users passwords stolen

As it was not enough, some genius of CEO is using obsolete technology to protect your data.
Please Welcome Nick Denton, (Gawker media) in due course for the Dummy Award of the year.

At the light of the Gawker Hack, one could think that the CEO of an internet media company would be a bit more enlighten than my grandmother when it comes to passwords & internet security,  Huh?
Well, guess what?  nope!
So, dear Nick Denton, CEO of Gawker.com,  You are one of a hell of a dummy!

The Gawker Network was hacked, compromised, owned, and pawned! Releasing a database of 1,300,000 users, as well as their source code and another bunch of juicy stuff! On the top of that, most users names & emails were also published with the corresponding hash.  John The Ripper ripped through the hashes with amazing ease...
 

The Main Issue?
-Money!
To probably save few bucks, Gawker never updated the level of security: They used DES to encrypt your data. DES is broken, obsolete and should not be used: After all, it's only 34 years old.

Using DES was only the tip of the iceberg: after few days of digging into the Gawker Hack, it appears that:
  • "They" were aware that something was wrong, but as it only concerned "peasants" it was not a top priority. The word "peasants" seems to be a code name for you, users of Gawker. 
  • They taunted and provoked few people on the 4chan board. As a tip, I would suggest Gawker not to taunt people that seems to know much more about computers than you do.
  • The hack or infiltration seems to have been on for at least 4 months before the panic mode was set "on"
  • Gawker was alerted when the front page of the site displayed some very weird stuff, including links to the full source code(!)

That didn't come as a surprise to HD Moore, chief security officer at Rapid7.
"The DES crypt hash can be broken with ridiculous ease," said Moore in an e-mail reply to questions late Monday about the strength of the encryption used by Gawker to safeguard its users' passwords. "John the Ripper, along with most other tools, are well-equipped to brute-force these."
Moore pointed out that the 56-bit DES (Data Encryption Standard) encryption used by Gawker had been broken more than a decade ago, when the Deep Crack machine built by the Electronic Frontier Foundation (EFF) won a 1998 contest sponsored by RSA after breaking a DES key in just 56 hours. Six months later, EFF and distributed.net collaborated to lower that time to just over 22 hours.
"These days, [graphics processor unit]-based cracking makes this even easier," noted Moore.
computerworld.com Dec 2010


So thank you Gawker for putting my security so low ...
 
 

From the Gawker Hack, by Gnosis.

"Let's start with our good friend Nick!
You would think someone like Nick Denton who likes to run his mouth and taunts such an unforgiving mass like Anonymous, would use a more secure password than "24862486".
The sad thing is he probably believes this password is "secure" because he likes to use it everywhere! " Gnosis Hack Group

Gnosis goes on and publish in clear multiple accounts of the above named dummy.















 Nick Denton and his crew taunted that group of hacker, and bragged a little bit too much.
You can brag Nick, but when you do so, you need to have ~at least~ some knowledge of what does what.

Gawker.com assured their users, shortly after that the Hack was publicly available (mind you) that:

"We'll continue to look into this, but as I commented on your site earlier, we have no evidence that any of our readers' user accounts/passwords have been compromised. They are not stored in plain text and are on entirely different systems than the third-party hosted Campfire screenshots that appear in this article.
  There's no evidence to suggest any Gawker Network user accounts were compromised, and passwords are encrypted (not stored in plain text) anyway, so stealing passwords isn't even possible."

- Well done Scott!  
The 200,000 accounts cracked so far are probably just an illusion:

"After gaining access to gawkers MySQL database we stumble upon a huge
table containing ~1,500,000 users. After a few days of dumping we
decided that 1.3 million was enough.

Gawker uses a really outdated hashing algorithm known as DES (Data Encryption Standard). Because DES has a maximum of 8chars using a password like "abcdefgh1234" only the first 8 characters "abcdefgh" are encrypted and stored in the database. If your
password is longer than 8 characters you only need to enter the first 8 characters
to log in! "


The main issue here is 1.3 million users login, emails and password in the wild. Not too bad for something that was "not even possible"

"Gawker uses DES to obfuscate your password, which is pretty much worthless. With an application of supercomputing power, the plaintext passwords could be revealed very quickly for all 1.3 million usernames." Jed Smith, Dec 2010

The second main issue is that most of those people are using the same password for a lot of things. I hope that Gawker users are using different email accounts:
Gnosis was taunted by Nick Denton, making them prove their point (And they did so deep that Nick must have a headache that originated from his rectum. No lube used.)
But at least, Gnosis are not that bad, gray-hish hackers: They published the all shebang, including source code, database, etc but they did not used it to hack people.
It would have been a massacre if they had phished the entire db without publishing it first.
That list was subsequently hacked and some of the Twitter Accounts linked started to see spam appear.

On the top of showing their absolute ignorance to the world, and being pawned, owned, covered with shame  by a group of "script kids" Gawker.com had the great idea to advise their subscriber, after the hack, to use strong password. What an irony, specialy when we look at the great password of their CEO. with this fantastic article on how to create a great password.

Gina Trapany lately said something that I applause, in regards to the Gawker hack:





So, you read that! huh? , No readable words found in a dictionary !!!!

 Well... if you look at the database of cracked password, you'll note that almost all passwords cracked where composed of:
  • Only numbers  (Yes Nick Denton, slap yourself here)
  • Only letters    (Yes, Gina Trapani, your advice is bad)
  • Used the email as password (Great Job! about 27% of the list....)
  • Were short
  • And finally, almost none used a sign, confirmed by Duo Security:
"Duo Security uncovered other interesting tidbits during its analysis, including the fact that nearly all of the cracked passwords — 99.45% — were composed of alphanumeric characters only, and did not contain any special characters or symbols."

    Why? Ok, then I am going to repeat again....

    If you use numbers only, you have 10 possibilities per character: 0,1,...8,9
    When your password is 3 characters long, and made only of numbers.., that's 1,000 possibilities and roughly 0.001 sec "resistance time"
    The Great Nick Denton had a password able to resist a bruteforce attack for less than an hour.
     Now, if he had used a single sign, i.e "&" the possibilities would have jumped from 9^10 to 9^127 or 8,594,754,748,609,400,000 compared to a mere 1,000,000,000
    Adding a sign would have made it 8,594,754,749 times more difficult to crack (that's 8.5 billion)

    Password?
    I DO NOT LIKE THE WORD "PASSWORD"
    Password makes people use "words", and it implies that it is a "single" string. 
    Hence, when you ask people to generate a password, they do! they create one single word!

    Think passphrase instead!
    One of the good point of the article of  Gina Trapani is the mention of an simple way to generate multiple and easy to remember password.   Password   Dang! Passphrase 

    As for the rest, here are my 2 cents: 
    • If you can find it in a dictionary, it's not good! 
    • Minimum 10ch long. 15 is highly regarded
    • Have you considered a space? 
    • Use Lower cap and UPPER cap, along with Signs and Numbers
    • Did you know that you can use accented latin characters?  é å ü (e-option-e)
    • Can't remember a string of signs? Use numbers with the shift key: 1234 = !@#$
    Example:   Use the birth day of your mom, i.e 1960-09, and type it with the Shift Key "on"
    You'll get "!(^)_)(" 
    so, any type of password such as "1960 Mommé!(^)_)(" will keep any hacker occupied for a while. 
    Add a "dot"+website, and "1960 Mommé!(^)_)(.gmail" is becoming seriously stupid strong. 

    So, using a phrase, that include the above mentioned tips and a solely 10 ch long Passphrase will generate  1,091,533,853,073,390,000,000 possible combination.  
    That number simply means that if you were to give each person on planet earth a computer able to crack 1 Billion keys per second, you'll still need about 78 years to crack it. 
    Make it 11 Ch long and it goes to 9,000 years. 


    One key factor to understand, is the famous "Faster than the bear" logic. 

    Imagine an hungry grizzly running after a group of people: somebody is going to be eaten!

    Most people believe that to escape a Grizzly bear, you need to be faster than the bear. 
    Logic dictates that in order to NOT be eaten by the bear, you simply need to be faster than the slowest guy:  He'll be the one being eaten by the bear. 

    The same theory applies with your passwords: If a hacker tries to crack your password, and can not succeed in a timely manner, he will most likely attack the next weak one. 
    You just need to be faster than the slowest guy....  

    One Last Thing: 
    Gawker hack or not,  you should not use a "good" email account to post comments, play games, tweet or facebook: use disposable email or reserve some addresses for the "junk"

    If one is compromised, it will not compromise the good stuff: Keep ham and spam separated.  


    lil recap:

    Numbers only:                         10 per Ch.
    Letters, lower case                   26 per Ch.
    Letter, lower and upper case    52 per Ch
    Numbers + Letters                   62 per Ch
    Numbers + Letters + Shift       74 per Ch    !@#$%^&*()_+
    Printable Characters                127 per Ch   0123...abc..ABC..!@#$%
    Full ASCII                               255 per Ch   (including "space")

    If you want to learn more, I highly suggest to read one of the following.
    I highly recommend "Hacking Wireless Exposed"

    Best Value Antivirus For Mac?


    Antivirus For Mac : The Scary Results






    Why An AntiVirus For Mac?

    What Is The Best Value Antivirus  For Mac?   Get all the Facts, Tests and Sometimes SCARY bugs From this "brother"  blog


    Good Reading, Stay Safe...

    Excerpt: 

    " .....Here comes the surprise
       
    ClamXav was unable to detect a downloaded infected file, either .com or .zip or to find a threat in a disk image" 
    ....It also deleted an entire iPhoto Library for a single file infected:  1 file infected, deleted 19,000 files.   Best to Avoid,  Stay away from it...." 
      ... " iAntiVirus, Intego and Norton were choked by a 49 KB (KiloBytes, not MB or GB) file "