Ikigai Daily
Menu
DriveTechnology insight

'123456' keeps topping lists of the most common passwords. In a 2019 analysis of accounts exposed in data breaches, the UK's National Cyber Security Centre found that 23.2 million of them used exactly that password.

National Cyber Security Centre, 2019

Technology

The story behind the card

Such lists come from breaches, when criminals steal and publish databases of logins. The NCSC used the Have I Been Pwned collection run by the security researcher Troy Hunt; the next most common choices were '123456789', 'qwerty', 'password' and '1111111'. Simple passwords fall quickly to attackers, who try the most popular ones first. Reused passwords are risky because criminals test leaked email and password pairs on other websites, a technique called credential stuffing. The NCSC recommends joining three random but memorable words, and the US standards body NIST advises length rather than complicated character rules. A password manager, an app that creates and stores a different strong password for every account, means you do not have to remember them.

Türkçe oku
“123456”, en yaygın şifreler listelerinin başından hiç inmiyor. Birleşik Krallık Ulusal Siber Güvenlik Merkezi (NCSC), veri sızıntılarında açığa çıkan hesapları 2019'da incelediğinde, 23,2 milyon hesabın şifresinin tam olarak bu olduğunu gördü.
Birleşik Krallık Ulusal Siber Güvenlik Merkezi, 2019

Bu listeler, suçluların giriş bilgilerini içeren veritabanlarını çalıp yayımladığı veri sızıntılarından derlenir. NCSC, güvenlik araştırmacısı Troy Hunt'ın yürüttüğü Have I Been Pwned arşivini kullandı; en yaygın öteki şifreler “123456789”, “qwerty”, “password” ve “1111111” idi. Saldırganlar önce en yaygın şifreleri denediği için basit şifreler çabucak kırılır. Aynı şifreyi birçok yerde kullanmak da risklidir: Suçlular sızdırılan e-posta ve şifre çiftlerini başka sitelerde dener; bu yönteme “kimlik bilgisi doldurma” (credential stuffing) denir. NCSC, rastgele ama akılda kalıcı üç sözcüğü birleştirmeyi önerir; ABD'nin standartlar kurumu NIST de karmaşık karakter kuralları yerine uzunluğu öne çıkarır. Şifre yöneticisi denen uygulamalar her hesap için farklı ve güçlü bir şifre üretip saklar; böylece hiçbirini ezberlemek gerekmez.

Sources and further reading

Background reading: Password
Get the mobile appAbout our cards

Related cards

These cards share a subject or reading mode with the card above.

WonderTechnology

CRISPR started out as a defence system in bacteria, which store snippets of virus DNA and cut up any virus that matches them. In 2012 Jennifer Doudna and Emmanuelle Charpentier showed it could be programmed to cut DNA at almost any chosen spot, which made editing genes far easier.

The name stands for ‘clustered regularly interspaced short palindromic repeats’: short DNA sequences repeated at regular intervals, with the virus snippets stored between them. Japanese researchers first noticed the pattern in 1987, and the Spanish microbiologist Francisco Mojica later worked out that it serves as an immune memory. The editing tool pairs a cutting protein, Cas9, with a short guide made of RNA, DNA's chemical cousin, that leads it to the matching DNA. When the cell repairs the cut, a gene can be switched off, or scientists can slip in a corrected version. Doudna and Charpentier won the 2020 Nobel Prize in Chemistry. In November 2023 the UK became the first country to approve a CRISPR treatment: Casgevy, for the inherited blood disorders sickle cell disease and beta thalassaemia. The method also raises ethical questions: in 2018 the Chinese scientist He Jiankui edited human embryos and was later jailed.

Nobel Prize / CRISPR researchRead card
DriveTechnology

In March 1989 Tim Berners-Lee, a British computer scientist at CERN, proposed a way to link the lab's scattered documents so that anyone could jump from one to another. His boss, Mike Sendall, wrote 'Vague but exciting...' on the cover and let him carry on. The idea became the World Wide Web.

The proposal, 'Information Management: A Proposal', described a real problem. Most scientists stayed at CERN for about two years and then left, so knowledge was constantly being lost, and even written records were hard to find among the lab's many incompatible computers. His answer was hypertext: documents containing links that lead straight to other documents, spread across a network. He had tried a small version of the idea for himself in 1980, a program called ENQUIRE. The proposal drew little interest at first. He sent it round again in May 1990 and, with the Belgian engineer Robert Cailliau, turned it into a formal project plan that November. Sendall let him build the system on a newly bought NeXT computer, and after considering names such as 'Information Mesh', Berners-Lee settled on World Wide Web.

CERNRead card
DriveScience

In 1905, while working as a technical expert at the Swiss Patent Office in Bern, Albert Einstein, then 26, published four papers that changed physics: on the photoelectric effect, on Brownian motion, on special relativity and on the link between mass and energy, E = mc². Physicists call it his miracle year.

Einstein had failed to find a university post after graduating, and in 1902 he joined the patent office in Bern, helped by the father of his friend Marcel Grossmann. His job was to assess patent applications, many of them for electrical and mechanical devices. In his spare time he debated physics and philosophy with friends in a small reading group they jokingly called the Olympia Academy, and he talked his ideas through with a colleague, Michele Besso, the only person thanked in the relativity paper. Alongside the four papers he completed a doctoral thesis on measuring the size of molecules. His paper on Brownian motion, the jittery movement of tiny particles suspended in a liquid, gave strong evidence that atoms really exist. He stayed at the patent office until 1909, when he became an associate professor at the University of Zurich.

Nobel PrizeRead card
DriveTechnology

The early reCAPTCHA, launched in 2007, showed two hard-to-read words. One was already known and checked that you were human; the other came from a scanned old book or newspaper that a computer had failed to read, so millions of people typing it helped digitise printed text.

A CAPTCHA is a small test that computers find hard and people find easy, used to keep automated programs, or bots, out of sign-up forms and comment boxes. The name stands for 'Completely Automated Public Turing test to tell Computers and Humans Apart'; it was coined in 2003 by Luis von Ahn, Manuel Blum and colleagues at Carnegie Mellon University. Von Ahn realised that people were spending millions of hours in total on these puzzles, and reCAPTCHA put that effort to use. Scanned pages were read by optical character recognition (OCR), software that turns pictures of letters into text; words it was unsure of became puzzles, and several people's answers were compared. The system helped digitise The New York Times archive and was then used for Google Books. Google bought reCAPTCHA in 2009, and from 2014 it moved to image puzzles and a simple 'I'm not a robot' box.

TechnologyRead card
DriveTechnology

By tradition, the first program people write in a new programming language simply makes the computer display 'Hello, world'. The habit comes from Brian Kernighan of Bell Labs, who used the phrase in tutorials in 1972 and 1974 and in The C Programming Language, the 1978 book he wrote with Dennis Ritchie.

The earliest known version is in Kernighan's 1972 tutorial for B, a forerunner of the C language, where it appeared in an example about variables; the example before it printed only 'hi!'. The 1978 book made the phrase famous, and today almost every programming course and language manual starts with a version of it. It survives because it is a quick check that everything works: that the language is installed, that the code can be turned into a program the computer can run, and that the programmer knows how to run it, all before anything harder begins. In Python it takes a single line, while older languages need several. On devices without a screen, such as tiny microcontrollers, the equivalent first test is often making a light blink. Outside computing the phrase was already the catchphrase of the New York radio presenter William B. Williams in the 1950s.

TechnologyRead card
Next card in the archiveThe unexamined life is not worth living.Read next →