The social media password, the bank one, the Netflix one…Every day we users have more and more accounts on Internet services in order to access them securely. If we do it right, we should have a password for each service, something that can become very difficult if we can't remember our passwords. That's where password managers come in, which usually have a password generation tool. It was recently discovered that this program generated passwords that are easy to guess.
More and more people trust these tools to generate the passwords they use every day. The tools themselves are activated the moment a user is creating a new account. In fact, Many of these programs have extensions for our browser for this purpose and to auto-complete login data. Al final, The intention of these tools is to create ultra-secure passwords.
That is the intention…The security consultancy Donjon discovered that between March 2019 and October 2020, the password generation algorithm used by Kaspersky Password Manager produced keys that could be discovered in just seconds through brute force attacks (trying all possible passwords). It was discovered that the tool used a pseudo-random number generator, something not suitable for the purpose of this tool.
Upon learning this fact, The community has been concerned. Mike Newman, CEO of My1Login (another similar application), expressed his bewilderment by stating that the main purpose of this type of tool is to generate virtually impossible-to-discover passwords and that learning this news about Kaspersky's tool was alarming. In addition, he added that supercomputers can make trillions of attempts per second to try to discover a password.
Kaspersky quickly got to work, updating its system and proposing a random number generation algorithm that allows generating stronger passwords. Obviously, users are advised to update to the latest available version of the application, which is available on Windows, Android and iOS.
Fountain: Betanews
Image: Wikimedia commons