Password Security and Attack Methods

The video tutorial covers the importance of password security, emphasizing the risks of storing passwords in plain text. It explains the concept of hashing as a method to secure passwords, using SHA-256 as an example. The tutorial also discusses brute force and dictionary attacks, highlighting how attackers can exploit weak passwords. It concludes with strategies to enhance password security.

Why is it risky to store passwords in plain text?

• It is a recommended security practice.

• It makes passwords easier to remember.

• It improves system performance.

• It allows anyone with access to read them.

What is a hash in the context of password security?

• A way to store passwords in plain text.

• A method to encrypt passwords.

• A cryptographic method to create a unique fingerprint of data.

• A technique to reverse engineer passwords.

What is a collision in hashing?

• When two different inputs produce the same hash.

• When a hash is longer than the input.

• When a hash is reversed to find the original input.

• When a hash is used to encrypt data.

Which hashing function is mentioned as an example in the video?

• SHA-256

• SHA-1

• MD5

• SHA-512

What is a brute force attack?

• An attack that tries every possible password combination.

• An attack that uses a single password repeatedly.

• An attack that targets network vulnerabilities.

• An attack that uses social engineering techniques.

Why are brute force attacks often not feasible online?

• They require too much bandwidth.

• They are easily detected by firewalls.

• They can lead to account lockouts after multiple failed attempts.

• They are illegal in most countries.

What is a dictionary attack?

• An attack that exploits software vulnerabilities.

• An attack that uses a list of common words to guess passwords.

• An attack that uses random characters to guess passwords.

• An attack that targets encrypted data.

How do attackers optimize dictionary attacks?

• By using outdated dictionaries.

• By using specialized word lists and substitutions.

• By targeting only weak passwords.

• By using only numbers.

What is a limitation of dictionary attacks?

• They cannot find passwords not in the dictionary.

• They are slower than brute force attacks.

• They are only effective against encrypted passwords.

• They require physical access to the system.

Why might attackers use a dictionary with specialized terms?

• To increase the attack speed.

• To reduce the computational resources needed.

• To target specific industries or contexts.

• To avoid detection by security systems.