You are on page 1of 2

Bad grammar make good password

the list of password no-nos: good grammar.

Along with birthdays, names of pets and ascending number sequences, add one more thing to

An algorithm developed by Ashwini Rao and colleagues at Carnegie Mellon University in Pittsburgh, Pennsylvania, makes light work of cracking long passwords, which make grammatical sense as a whole phrase, even if they are interspersed with numbers and symbols. Rao's algorithm makes guesses by combining words and phrases from password-cracking databases into grammatically correct phrases. While other cracking programs make multiple guesses based on each word in a database, putting in "catscats" and "catsstac" as well as just the word "cats", none of the programs make the jump to combine multiple words or phrases in a way that makes grammatical sense, like "Ihave3cats", for instance. Ten per cent of the long passwords that Rao and her team tested were cracked exclusively using their grammar-sensitive methods, unyielding in the face of other well-known cracking algorithms such as John the Ripper and Hashcat. As processing power continues to fall in price, choosing passwords that are easily memorised but secure is getting harder and harder. A $3000 computer running appropriate algorithms can make 33 billion password guesses every second. In a paper due to be presented at the Conference on Data and Application Security and Privacy in San Antonio, Texas, next month, the researchers suggest that other types of familiar structures like postal addresses, email addresses and URLs may also make for less secure passwords, even if they are long.


Discussion Question: Are you concerned about password and Internet security? Do you think people should be more concerned about this issue?

Bad grammar make good password


Listen and complete the gaps:

Along with birthdays, names of ______ and ____________ number sequences, _______ one more thing to the list of password no-nos: good grammar. An algorithm developed by Ashwini Rao and colleagues at Carnegie Mellon University in Pittsburgh, Pennsylvania, makes light work of __________ long passwords, which make grammatical sense as a whole phrase, even if they are _____________ with numbers and symbols. Rao's algorithm makes guesses by ______________ words and phrases from password-cracking databases into grammatically correct phrases. While other cracking programs make multiple guesses based on each word in a database, putting in "catscats" and "catsstac" as well as just the word "cats", none of the programs make the ___________ to combine multiple words or phrases in a way that makes grammatical sense, like "Ihave3cats", for instance. Ten per cent of the long passwords that Rao and her team tested were cracked _____________ using their grammar-sensitive methods, ____________ in the face of other well-known cracking algorithms such as John the Ripper and Hashcat. As ______________ ________ ____________ continues to fall in price, choosing passwords that are can make 33 billion password guesses every second.

easily ________________ but secure is getting harder and harder. A $3000 computer running algorithms

In a paper _______ ______ _____ presented at the Conference on Data and Application Security and Privacy in San Antonio, Texas, next month, the researchers suggest that _______ ________ of familiar structures like postal addresses, email addresses and _________ may also make for _______ ________ passwords, even if they are long.
Discussion Question: Are you concerned about password and Internet security? Do you think people should be more concerned about this issue?

You might also like