Suspicious Website Logins
Введено| English | Значение |
|---|---|
| password attack/ˈpæswɜːd əˈtæk/ | атака на пароли |
| authentication/ɔːˌθentɪˈkeɪʃn/ | аутентификация |
| dictionary/ˈdɪkʃənəri/ | словарь |
| password manager/ˈpæswɜːd ˈmænɪdʒə/ | менеджер паролей |
| multifactor authentication/ˌmʌltɪˈfæktə ɔːˌθentɪˈkeɪʃn/ | многофакторная аутентификация |
What a password attack is
- A password attack 密码攻击 tries to log in with guessed or stolen passwords.
- An online attack tries them against a real login page.
- Automated tools can try thousands of passwords fast.
Signs in the log
- Many failed logins in a short time.
- Login attempts at unusual hours.
- Logins from unknown devices.
A hardware security key: strong authentication 身份验证 reduces damage when a password is phished
Strong password or weak password?
Strong passwords are long, random, and unique; weak ones follow common patterns or use personal info.
Which is a sign of an online password attack in the logs?
Сложность 1/5 · 100 монет + небольшой бонус за первое выполнение сегодня
A burst of failed logins signals guessing.
An adversary's list of likely passwords built from your personal info is a ____.
Сложность 1/5 · 100 монет + небольшой бонус за первое выполнение сегодня
A dictionary of guesses is fed to an automated tool.
Why weak passwords fail
- People use predictable patterns like
Summer24!. - They reuse names of pets or family.
- An adversary builds a dictionary 字典 of likely guesses.
Never reuse one password across sites. If one site is breached, adversaries try that same password everywhere else — a trick called credential reuse.
Which password is strongest?
Сложность 1/5 · 100 монет + небольшой бонус за первое выполнение сегодня
Long, random, unique beats any pattern.
Multifactor authentication (MFA) is no more secure than a strong password alone.
Сложность 1/5 · 100 монет + небольшой бонус за первое выполнение сегодня
False. MFA asks for extra proof, such as a texted code or a fingerprint, so a stolen password alone is not enough to get in.
Order these from WEAKEST to STRONGEST password.
Сложность 3/5 · 200 монет + небольшой бонус за первое выполнение сегодня
Length and randomness increase strength.
Which make authentication stronger? (Choose all)
Сложность 2/5 · 140 монет + небольшой бонус за первое выполнение сегодня
Reusing a password — even a strong one — is risky.
Making authentication stronger
- Use long, random, unique passwords — a password manager 密码管理器 helps.
- Avoid names, dates, and meaningful words.
- Turn on multifactor authentication (MFA) 多因素身份验证.
P@ssw0rd2024 feels clever but follows the exact common pattern (word + number + symbol) an adversary's dictionary expects. A random 16-character string from a password manager is far safer.
An online password attack guesses against a live login and shows up as many failed attempts. People lose because they pick weak, patterned passwords. Fix it with long unique passwords and MFA.