I Got Your Mail. And I Don’t Even Need A Side-Channel Attack.

How? I just used your password. As recently reported by CNN.com, SplashData just released its “Worst Passwords” list compiled from common passwords posted by hackers. I can’t believe how stupid the top 25 are. It’s insane. I don’t even need a brute-force dictionary to have a good chance of breaking into a random account if this is what still passes for a password these days! If you have one of these, you might want to consider changing it. But if you’re going to use a dictionary word, at least mis-spell it, or it won’t be much harder for a hacker with a brute-force dictionary-based script and a bit of patience.

1. password

2, 123456

3. 12345678

4. abc123

5. qwerty

6. monkey

7. letmein

8. dragon

9. 111111

10. baseball

11. iloveyou

12. trustno1

13. 1234567

14. sunshine

15. master

16. 123123

17. welcome

18. shadow

19. ashley

20. football

21. jesus

22. michael

23. ninja

24. mustang

25. password1