By far, the most popular password on the site was “123456,” apparently satisfying a minimum character limit on the site’s password restrictions, but doing little for security. A full 290,731 users used this password, far more than the runner-up, the slightly less complex “12345, which attracted 79,078 uses.

For years, security experts have been arguing that users need to use more complex passwords, especially as the computing power and algorithms behind brute-force password crackers become ever more sophisticated. But 30 percent of the RockYou users picked a password less than six characters in length, and 40 percent used only lowercase letters.

“Assuming an attacker with a DSL connection of 55KBPS upload rate and that each attempt is 0.5KB in size, it means that the attacker can have 110 attempts per second,” Imperva wrote in a report released on Thursday. ” At this rate, a hacker will gain access to one new account every second or just less than 17 minutes to compromise 1000 accounts.”

Of the list of compromised passwords, the usual suspects surfaced: “Password”; the site’s name, or “rockyou”; “abc123″; and first names, such as “Ashley” and “Daniel”.  Imperva published a list of the most popular passwords, all of which are extremely weak from a security sense.

The very first tip that Imperva and other security experts, such as Bruce Schneier, recommend for strong passwords is that users avoid using letter and number combinations that appear in the dictionary. The best solution, they say, is to come up with a password that incorporates both uppercase and lowercase characters, numbers, and special characters, such as “$” or “%”.

But in the list of RockYou passwords, “the ADC analysis showed that almost 60% of users chose their passwords from within a limited set of characters,” Imperva found. “About 40% of the users use only lowercase characters for their passwords and about another 16% use only digits. Less than 4% of the users use special characters.”

The problem is that the habit is hard to break. “In 1990, a study of Unix password security revealed that password selection is strikingly similar to the 32 million breached passwords,” Imperva added. “Just ten years ago, hacked Hotmail passwords showed little change. This means that the users, if allowed to, will choose very weak passwords even for sites that hold their most private data.”

by Mark Hachman, PC Magazine

Reasons to Upgrade to Win 7.

You can still use XP apps. If you need Windows 7 speeds but have applications that only run on eight-year-old Windows XP, XP Mode can save you. This free, downloadable add-on for the Pro, Enterprise, and Ultimate versions of Windows 7 lets your old programs run as if native to Windows 7. XP Mode does not require a separate, licensed copy of XP. Sure, you can accomplish the same thing with third-party software, but that’ll cost you.

Better search. If you’re an organizational pro, you never need to search your hard drive. But the chance that all your employees are equally gifted is about as likely as Steve Ballmer using an iPhone. Search is the killer app on the Web, and Windows 7 might finally have made it so in the OS. Vista integrated a search box throughout the interface; you’ll find one in the Start menu, the control panel, and Windows Explorer. In Windows 7, it’s the results that count. You can narrow the returns on the fly when you get too many. The search bar retains a history of what you’ve looked for, so you can quickly find things again. There’s a better preview available for search results, as well. Finally, you don’t have to worry about employees being organized when it comes to digital data.

Your driver is here. Older systems had a hard time with Vista upgrades due to lack of driver support for the hardware. Heck, so did some newer systems. That’s unlikely to be the case with Windows 7. It has more in common with Vista than not, and Vista’s had lots of time to get all the hardware support it needs. Better yet, Windows 7 is designed to go directly to the driver download pages of major vendors if a compatible driver isn’t found.

DirectAccess may be the best access. DirectAccess is just that: direct access to your business network from anywhere, via secured tunneling using IPsec and IPv6— without the use of a trusted virtual private network (VPN). Don’t worry about IPv6 costs—Windows 7 comes with IPv6-to-IPv4 transition technology that integrates with current networks. It’s a whole new way for connecting securely. The catch: Your network has to run Windows Server 2008 R2, so this solution won’t work for offices without dedicated IT staff. If you do have Windows Server, it’ll only take you a few clicks to connect clients via the Web. It’s significantly easier than setting up a VPN server. Users can be authenticated with Active Directory, so the Windows 7 solution not only provides network permissions, but can push software updates to users as if they’re connected to the business intranet.

Better enterprise features. There’s a lot of good stuff in Windows 7 Enterprise (which is essentially Windows 7 Ultimate bundled on corporate OEM systems) besides DirectAccess, specifically for security and management. That includes Bit- Locker, which encrypts entire hard drives, and BitLocker to Go, which does the same on removable USB flash drives. AppLocker lets IT pros specify exactly what programs are run on Windows 7 systems, so users can’t bring in games from home. And more languages are supported. None of these features needs Windows Server 2008 R2 to function, but it is necessary to have Server 2008 if you want to use the Windows 7 Advance Group Policy Management 4.0 tools to control them from afar.

Less user annoyance. This might be subjective, but anyone who used Vista at all to install a program knows the heart-stopping fear that hit when a screen went blank for a split second. But instead of a crash, it was a feature, not a bug, part of the User Account Control (UAC) that forced you to approve installation of programs (among other things). UAC is still in Windows 7, but it’s far less intrusive. Plus the control panel for it got infinitely simpler, with just a slider-bar to indicate just how much control it should have.

64 whole bits. Not that you couldn’t get a 64-bit version of Vista, but every box with Windows 7 comes with both the 32- and the 64-bit version inside. You’ll want the latter if your hardware can support it. The 64-bit version will work, for example, with more than 4GB of RAM; if you’ve got an older CPU and less RAM than that, don’t bother. You only get one activation key, however, even if it looks like there are two versions of the OS in the box. (Use the free utility to determine if your system can even handle a 64-bit OS. Microsoft also offers an Upgrade Advisor.)

Less useless bloatware. Say goodbye to unused extras like Windows Mail or Movie Maker. You’ll have to get them from Windows Live’s Web site in the future—if you even want them. (See below for more on MSPaint and WordPad, however.) That won’t stop system vendors from shoving some shovelware onto your company computers if you get them at retail; for that, use The PC Decrapifier for a pre-use cleanup.

More work time. In our tests in PC Labs, we found that Windows 7 boots up several seconds faster than Vista on identical hardware. That’s precious time during which your employees can be productive! Okay, that’ll last only a while, until installing new software and everyday use slow down start time, but with the right hardware, Windows 7 should zing along plenty fast in all uses.

Reasons NOT to Upgrade to Win 7.

No learning curve. There’s a hidden cost when you upgrade users to an OS with as many significant interface changes as Windows 7: training. Windows 7 features big improvements, especially over XP. But, after almost a decade, users know XP backwards and forward; getting them up to speed on Windows 7 might take time your company can’t afford. Even programs like WordPad and MSPaint have a new interface.

XP updates until 2014. You might feel you have to upgrade to Windows 7 because eventually Microsoft will stop patching XP for security and other issues. And it will. But do you consider five years from now soon? If you’re happy with XP (and can live without the tech support from Microsoft, which ended earlier this year), why change?

No direct XP upgrades. Think you can just pop a Windows 7 disc into a system and upgrade the OS but leave your software and data intact? Think again. Microsoft is only allowing “in-place” upgrades from Vista— XP users have to format their drives and do a clean install. LapLink has an elegant solution, iYogi, for one, is offering “migration assistance” to help move data (but not programs), but either will cost you money and time to use. If you’re okay with the nukeand- boot-and-reinstall scenario, do it; why upgrade and wonder if XP is responsible for new Windows 7 problems?

New hardware needed. You’ve been running XP for years just fine on computers that were the top of the line in 2001. The chances of them supporting Windows 7 are slim. We’re not talking just upgrading a couple of components—it’s going to be time to get all-new systems, which can be costly, even if computers are cheaper today. Remember, at the very least, you need 1GB of RAM and 16GB of disk space just to install the 32-bit version of Windows 7. You need even more RAM and disk space to go 64-bit or to run XP Mode. Furthermore, installation from disc requires a DVD drive. You can get around that requirement, however, by copying the files to a bootable USB flash drive; instructions are available online in various places, including here. Slipstreaming the install onto a USB drive has the added bonus of giving you the same Windows 7 image to put on all the company computers.

The advances coming out of Windows 7 may be more evolution than revolution, but that doesn’t mean they’re not great for your company if you’ve got the right equipment, and the money to buy it, and users capable of handling the change. If so, take the plunge. You’ll likely find the upgraded OS has an interface, security, search, and more to like. But if you don’t like it, be sure to let us know.

Courtesy of PC MAGazine