今日推荐开源项目：《InfoSpider》
今日推荐英文原文：《Rules for strong passwords don't work, researchers find. Here's what does》
今日推荐开源项目：《InfoSpider》传送门：项目链接
推荐理由：InfoSpider 是一个集众多数据源于一身的爬虫工具箱，旨在安全快捷的帮助用户拿回自己的数据，工具代码开源，流程透明。并提供数据分析功能，基于用户数据生成图表文件，使得用户更直观、深入了解自己的信息。 目前支持数据源包括GitHub、QQ邮箱、网易邮箱、阿里邮箱、新浪邮箱、Hotmail邮箱、Outlook邮箱、京东、淘宝、支付宝、中国移动、中国联通、中国电信、知乎、哔哩哔哩、网易云音乐、QQ好友、QQ群、生成朋友圈相册、浏览器浏览历史、12306、博客园、CSDN博客、开源中国博客、简书。
今日推荐英文原文：《Rules for strong passwords don't work, researchers find. Here's what does》作者：Laura Hautala
原文链接：https://www.cnet.com/news/rules-for-strong-passwords-dont-work-researchers-find-heres-what-does/
推荐理由：在人均网络冲浪的今天, 我们面对海量app, 也在这些app上创建了无数的账号, 人们也开始更加关注自己的账号安全. 这篇文章将提供一些实用的tips来提升你的密码可靠度.
Rules for strong passwords don't work, researchers find. Here's what does
When you create a password for yet another new account, you'll probably encounter familiar rules designed to make it harder for hackers to get in: Use capitals letters, numbers and special characters. However, researchers at Carnegie Mellon University say these requirements don't make your password stronger.Lorrie Cranor, director of the CyLab Usable Security and Privacy Laboratory at CMU, says her team has a better way, a meter that websites can use to prompt you to create more-secure passwords. After a user has created a password of at least 10 characters, the meter will start giving suggestions, such as breaking up common words with slashes or random letters, to make your password stronger.
The suggestions set the password strength meter apart from other meters that provide an estimated password strength, often using colors. The suggestions come from common pitfalls Cranor's team has seen people make when they set up passwords during experiments run by the lab.
One of the problems with many passwords is that they tick all the security checks but are still easy to guess, because most of us follow the same patterns, the lab found. Numbers? You'll likely add a "1" at the end. Capital letters? You'll probably make it the first one in the password. And special characters? Frequently exclamation marks.
CMU's password meter will offer advice for strengthening a password like "ILoveYou2!" -- which meets the standard requirements. The meter also offers other advice based on what you type in, such as reminding you not to use a name or suggesting you put special characters in the middle of your password.
"It's relevant to what you're doing, rather than some random tip," Cranor said.
In an experiment, users created passwords on a system that simply required them to enter 10 characters. Then the system rated the passwords with the lab's password strength meter and gave tailored suggestions for stronger passwords. Test subjects were able to come up with secure passwords that they could recall up to five days later. It worked better than showing users preset lists of rules or simply banning known bad passwords (I'm looking at you "StarWars").
Cranor and co-authors Joshua Tan, Lujo Bauer and Nicolas Christin will present their latest password findings on Thursday at the ACM Conference on Computer and Communications Security, which is being held virtually. The team hopes its tools will be adopted by website makers in the future.
In the meantime, Cranor says the best way to create and remember secure passwords is to use a password manager. Those aren't widely adopted, and they come with some trade-offs. Nonetheless, they allow you to create a random, unique password for each account, and they remember your passwords for you.
下载开源日报APP：https://openingsource.org/2579/
加入我们：https://openingsource.org/about/join/
关注我们：https://openingsource.org/about/love/
