Connect with us

E-Business

Trustwave Says Longer Passwords Harder to Breach

Published

on

Cybercrime.jpg
Kindly share this post

As the global cyber threats increase, Trustwave in its research found that mixing upper and lower case letters, numbers and special characters doesn’t make passwords any harder for hackers to crack, only increasing the number of characters does.

The security firm purpose built two machines at a cost of almost $5,000 with the aim of cracking a sample of 626,718 hashed passwords collected during thousands of penetration tests in 2013 and 2014.

“The majority of the sample came from Active Directory environments and included Windows LAN Manager (LM)- and NT LAN Manager (NTLM)-based passwords,” the firm wrote in its 2014 Business Password Analysis report.

“We recovered more than half of the passwords within just the first few minutes. We eventually cracked 576,533 or almost 92 percent of the sample within a period of 31 days.”

According to the report, while mixing different characters and numbers might make it harder for humans to crack your password, “it does not make recovering the password any more resource-intensive for password-cracking tools”.

Advertisement

“Only increasing the number of characters in the password dramatically affects the time it will take an automated tool to recover the password,” it said.

Trustwave said that an automated tool can crack an eight-character password randomly comprised of all four character types far quicker than a 28-character password consisting of only upper and lower case letters.

It’s the difference between 3.75 days and 17.74 years, according to the firm.

“A brute-force attack on that collection involves calculating the hashes for potential passwords and comparing those hashes to the password hashes the attacker wants to crack,” it explained.

“If the tool identifies a match, a password is cracked.” The firm urged companies to “educate users on the value of choosing longer pass-phrases instead of simple, predicable, easy-to-crack passwords”.

Advertisement

It added that two factor authentication should be employed for network access.

“IT administrators can do their part to hinder password-cracking attacks by using unique, random salts when hashing stored passwords whereby a piece of unique, random piece of data is combined with each password before the hash is calculated,” the report concluded.

“Secure password storage combined with well-educated users and a properly designed policy for user password choice can play a vital role in helping prevent a breach.”

 

Advertisement

Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Kaigama,Catholic Archbishop of Abuja Warns against Misuse of AI

Published

on

Kindly share this post

Ignatius Kaigama, Catholic Archbishop of Abuja, has warned that the misuse of artificial intelligence (AI) could pose serious risks if technological innovations are not guided by strong ethical principles.

Kaigama,Catholic Archbishop of Abuja Warns against Misuse of AI

Artificial intelligence is a branch of computer science focused on creating machines or software capable of simulating human cognitive processes.

Kaigama gave the warning on Sunday during his homily at St. Anthony Mary Claret Pastoral Area, Zuba, in the Federal Capital Territory,

He said that while artificial intelligence has enormous potential to improve lives, its irresponsible use could have harmful consequences.

Citing the teachings of Pope Leo XIV, the Archbishop said scientific and technological advances should serve humanity, uphold human dignity and promote the common good.

Advertisement

“We witness the misuse of human freedom, the unethical application of science and medicine, and now, in Artificial Intelligence,” he said.

The Catholic prelate also warned against what he described as an increasing pursuit of material wealth at the expense of moral values, saying greed and the love of money continue to contribute to many of society’s problems.

According to him, the excessive pursuit of wealth has diverted many people from the values of truth, justice and service, weakening the moral fabric of society.

 

 

Advertisement

Kindly share this post
Continue Reading

E-Business

TeKnowledge, Equinix Partner to Advance Nigerian Digital Infrastructure

Published

on

Kindly share this post

TeKnowledge and Equinix announced a partnership to accelerate secure hybrid and multi-cloud adoption and enable AI-ready digital infrastructure across the region.

Nigeria’s digital transformation is accelerating rapidly, with the digital economy being a significant contributor to the country’s gross domestic product (GDP).

As demand for cloud services, AI adoption, digital payments and data-driven innovation continues to accelerate across West Africa, the partnership is positioned to advance the region’s digital transformation.

By combining Equinix’s in-country and global data centre infrastructure and secure interconnection capabilities with TeKnowledge’s expertise in designing, deploying and managing AI, data, customer experience and cybersecurity solutions, organisations can accelerate innovation while maintaining data residency and sovereignty requirements.

Together, the organisations empower enterprises and government institutions to bridge the gap between digital ambition and execution through secure, high-performance digital environments built on local infrastructure and delivered by local talent.

Advertisement

Speaking, CEO and President, TeKnowledge, Aileen Allkins, said: “Organisations across Africa are increasingly looking to modernise their infrastructure while maintaining the performance, security, and compliance required to support growth.

Through our partnership with Equinix, we are combining world-class digital infrastructure with deep local expertise to help customers accelerate cloud adoption, strengthen resilience, and unlock new opportunities through AI and emerging technologies.”

Managing Director of Equinix West Africa, Wole Abu, expressed delight at partnering with TeKnowledge to bring together Equinix’s globally interconnected platform, spanning over 280 data centres and 10,000 customers worldwide.

Kindly share this post
Continue Reading

E-Business

New NIMC Act Strengthens Data Protection, Privacy – Director

Published

on

Kindly share this post

Uche Chigbo, coordinating director of Operations, National Identity Management Commission, (NIMC), has said the newly enacted NIMC Act strengthens data protection and privacy, expands identity coverage to include everyone in Nigeria and Nigerians in the diaspora, and provides the legal framework for a secure and trusted digital identity ecosystem.

New NIMC Act Strengthens Data Protection, Privacy - Director

She said the new law replaces the 2007 NIMC Act, which had become outdated due to rapid technological advancements, evolving cybersecurity threats, the growth of the digital economy, and the enactment of the Nigeria Data Protection Act.

According to her, the updated legislation better positions the Commission to deliver Nigeria’s digital identity agenda and improve access to government and private sector services.

“The Act itself has taken in a whole lot of things to make sure that NIMC is well-positioned to be able to deliver on the identity agenda and program of Nigeria. The area of universal coverage was expanded within the Act so that NIMC can enroll everybody that is within the soil of Nigeria—male, female, children, whether they are IDPs or orphans or whatever it is, and even Nigerians in diaspora.

“There is quite a lot within the Act that over the few days and weeks, even with my Director-General’s courtesy visit, we are trying to sensitize and educate the general public, and also bring awareness to this new Act so that people will know what are the rights that exist within it, what are the obligations, what are the stronger enforcement and penalties that has also been expanded within the Act, and then what are also the regulatory autonomy that has been given to NIMC to make sure that they drive the digital identity ecosystem in Nigeria,” she explained.

Advertisement

“There’s a lot of provisions and changes with the new Act. Um, the NIMC 2007 Act has been operating for close to 19 years now. So, we can see that, um, you can actually say it’s almost obsolete. And then with a lot of technological advancements in the world now, with the enactment of the Nigeria Data Protection Act, and then with also a lot of evolving security challenges, cybersecurity challenges, as well as the ever-growing digital economy, it became very necessary that a comprehensive review of the NIMC Act should be done.

So, that 2007 Act has been repealed and a new NIMC 2026 Act is in place,” she explained.

Chigbo clarified that the National Identification Number (NIN) is Nigeria’s unique identifier and the only valid means of identification for accessing government services.

She added that it enables secure identity verification and improves access to services.

“NIN has been designated as the unique identifier in Nigeria and then by the government of Nigeria establishing it as the only valid means of identification for assessing government services. So, NIN, it’s positioned to be a valuable tool for empowering citizens and legal residents to facilitate access to service delivery in Nigeria. And it’s also a tool for people to be able to prove their identity as they go about their daily businesses,” she said.

Advertisement

Speaking on identity harmonisation across government agencies, Chigbo said NIMC is integrating identity databases to enable Nigerians to access services seamlessly using the National Identification Number (NIN), while other agencies continue to issue functional identities for specific purposes.

“There’s a distinction between a foundational identity and a functional identity. NIMC provides the foundational identity, which answers the question, ‘Who are you?’ Are you a Nigerian or a legal resident? Who are you? That’s what NIMC is providing. All these other agencies that you have mentioned, they provide functional ID, which is an ID that relies on the foundational ID, where they have established who you are and then they are now trying to answer the question, ‘Are you now eligible to have these services? Are you now eligible to benefit from this transaction or scheme?’ So, those are two different distinctions.”

However, Chigbo said NIMC’s mandate is to harmonise and integrate identity systems across government, with the amended Act designating the Commission as the sole repository for biometric data.

“However, NIMC mandate is to make sure that we harmonize and integrate with all these agencies so that you’re one and the same person in any of the databases or registries that you have. The Act that has been expanded and amended also positions NIMC as the only repository for biometric data capture so that we can have effective identity management and coordination in Nigeria.

“So, that harmonization is already happening, the integration is already happening,” she stated.

Advertisement

She also disclosed that NIMC has introduced an online modification portal that allows Nigerians to begin the process of correcting or updating their personal information from the comfort of their homes or offices.

“But also, NIMC we have a modification portal that enables you to sit in the comfort of your home or office to be able to start the process of correction or updates of your data. We already have a self-service modification portal that allows you to make corrections,” she disclosed.

On the cost of obtaining a NIN, Chigbo clarified that enrolment and issuance of the National Identification Number are free.

She, however, noted that some other identity-related services attract approved fees, which are published on the NIMC website and paid electronically through the government Remita platform.

“Enrollment for the issuance of the National Identification Number, NIN, is free. There are other services, identity services that NIMC provide. Those ones have their charges, and those fees and charges are publicized on the NIMC website so that people can see what those charges are. And NIMC does not collect cash. Our transactions and the charges are paid electronically through the government Remita platform,” she said.

Advertisement

 

Kindly share this post
Continue Reading

Trending