弱いパスワードの作り方

社内用に作ったパスワードに関する情報まとめ。

イラスト：いらすとや
テンプレート：Azusa
http://sanographix.github.io/azusa-colors/

Transcript

1. ऑ͍
   ύεϫʔυ
   ͷ࡞Γํ
   by @glico20
   

   View Slide

2. ߐᖒ ঘ @glico20
   READYFOR᷂ͷΤϯδχΞ
   ৘ใηΩϡϦςΟεϖγϟϦετ ࢿ֨อ࣋ऀ
   READYFORϘʔυήʔϜ෦ɹ෦௕
   READYFORΧϥΦέ෦ɹ෭෦௕
   

   View Slide

3. ڧ͍ύεϫʔυͬͯԿʁ
   

   View Slide

4. ऑ͍ύεϫʔυ
   ͳΒ؆୯ʂ
   

   View Slide

5. ໨త
   ऑ͍ύεϫʔυͷύλʔϯΛ஌ͬͯɺ
   ࢖͍ͬͯΔύεϫʔυͷڧ౓Λ޲্͞
   ͤΔ
   

   View Slide

6. ର৅
   ࣗ෼ͷύεϫʔυڧ౓ʹࣗ৴͕ແ͍ํ
   ੲͷύεϫʔυΛͣͬͱ࢖͍ͬͯΔํ
   ύεϫʔυ͕όϨΔͱେࢂࣄʹͳΔํ
   

   View Slide

7. ̍ɽ࢖ΘΕ͗ͯ͢όϨόϨ
   

   View Slide

8. ̍ɽ࢖ΘΕ͗ͯ͢όϨόϨ
   123456
   123456789
   111111
   qwerty
   password
   19890822
   tanaka0822
   ೥΋ͨ͘͞Μ
   ࿙Ӯͨ͠ύεϫʔυͨͪ
   ஀ੜ೔͘Β͍ͳΒ4/4
   ͳͲͰ؆୯ʹ෼͔Δ࣌୅
   

   View Slide

9. ࠷ऑͷύεϫʔυ
   ઐ໳஌͕ࣝͳͯ͘΋਺ඵͰಥഁͰ͖Δύεϫʔ
   υͰ͢ɻ
   ࢓ࣄͷࢿྉʹΞΫηεͰ͖ΔPC΍εϚϗͷ
   ϩοΫύεϫʔυͰ͸ઈରʹར༻͠ͳ͍Α͏
   ʹ͠·͠ΐ͏ɻ
   

   View Slide

10. ̎ɽͱʹ͔͘୹͍ˍӳࣈ͚ͩ
    

    View Slide

11. ̎ɽͱʹ͔͘୹͍ˍӳࣈ͚ͩ
    wikipedia ΑΓൈਮ
    

    View Slide

12. ϒϧʔτϑΥʔε߈ܸͰҰൃ
    ୹͍ύεϫʔυ͸ϒϧʔτϑΥʔε߈ܸʢ૯
    ౰ΓʣʹΑΓඵࡴ͞Ε·͢ɻ
    લεϥΠυͷσʔλ͸2008೥ͷ΋ͷͳͷͰɺ
    ࠓͳΒॠ͖ఔ౓ͷ࣌ؒͰղಡՄೳͰ͢ɻ
    

    View Slide

13. ̏ɽࣙॻʹ͋Δ୯ޠͷΈ
    

    View Slide

14. ̏ɽࣙॻʹ͋Δ୯ޠͷΈ
    service
    baseball
    America
    mickey
    internet
    secret0822
    baseball0822
    Ұൠతͳ୯ޠɺਓ໊ɺ஍໊
    ͳͲ
    ஀ੜ೔ͳͲͷόϨ΍͍͢਺
    ࣈͱͷ૊Έ߹Θͤ΋ऑ͍
    

    View Slide

15. ࣙॻ߈ܸͷඪతʹ
    ࣙॻ߈ܸ͸ͦͷ໊ͷ௨ΓɺࣙॻσʔλΛ࢖ͬ
    ͯύεϫʔυΛಥഁ͠Α͏ͱ͢Δ߈ܸɻ
    ௕͍ύεϫʔυͰ΋ࣙॻʹࡌ͍ͬͯΔ୯ޠͩ
    ͚Ͱ͸ɺ͙͢ʹಥഁ͞ΕΔՄೳੑେͰ͢ɻ
    

    View Slide

16. ̐ɽ࢖͍ճ͠
    

    View Slide

17. ̐ɽ࢖͍ճ͠
    શͯͷαΠτͰ
    ಉ͡ύεϫʔυ
    ࢓ࣄͰ࢖͏ύεϫʔυ΋
    શ͘ಉ͡
    

    View Slide

18. ύεϫʔυϦετ߈ܸ
    ผͷWebαΠτ͔Β࿙ΕͨύεϫʔυΛϦετ
    Խ͠ɺͦΕΛ࢖ͬͯύεϫʔυΛಥഁ͢Δ߈ܸ
    ࢓ࣄͰ΋ಉ͡ύεϫʔυΛ࢖͍ͬͯΔͱେࢂࣄ
    ʹͳΔ͜ͱ΋…ɻ
    

    View Slide

19. ·ͱΊ
    

    View Slide

20. ऑ͍ύεϫʔυͨͪ
    1. ࢖ΘΕ͗ͯ͢όϨόϨ
    2. ͱʹ͔͘୹͍ˍӳࣈ͚ͩ
    3. ࣙॻʹ͋Δ୯ޠͷΈ
    4. ࢖͍ճ͠
    

    View Slide

21. ͓·͚
    

    View Slide

22. ऑ͘ͳ͍
    ύεϫʔυ
    

    View Slide

23. ʮύεϑϨʔζʯ
    

    View Slide

24. ʮύεϑϨʔζʯͬͯʁ
    ΞϝϦΧࠃཱඪ४ٕज़ݚڀॴ(NIST)͕ਪ঑͢Δɹ
    ࠷௿64จࣈͰεϖʔε΋ೖΕΒΕΔύεϫʔυ
    ex)

    Everything that’s worth doing is actually pretty
    hard and takes a lot of work. There are no short
    cuts. (103จࣈ)

    - ϚʔΫɾβοΧʔόʔάࢯͷϋʔόʔυେֶଔۀࣜεϐʔνΑΓൈਮ
    

    View Slide

25. ʮύεϑϨʔζʯͷϝϦσϝ
    ϑϨʔζʹ͢Ε͹௕ͯ͘΋֮͑΍͘͢ɺܻ਺͕ଟ͍ͷͰղ
    ಡ͞Εʹ͍͘ɻ(NISTͷݟղ)
    ͔͠͠ɺ

    ೖྗ͕ΊΜͲ͍͘͞͠ɺࣗಈೖྗʹ͢Δͱ௕ͯ͘๨Ε΍͢
    ͘ɺ୯ޠͰߏ੒͞Ε͍ͯΔͷͰࣙॻ߈ܸʹڧ͍ͷ͔ٙ໰ɻ
    ͦ΋ͦ΋ɺ·ͩεϖʔεΛؚΜͩύεϫʔυΛ࢖͑ΔWeb
    αΠτ͕΄΅ͳ͍ɻ(ݸਓͷݟղ)
    

    View Slide

26. ͦ͜Ͱ
    

    View Slide

27. ୹ॖύεϑϨʔζ
    

    View Slide

28. ୹ॖύεϑϨʔζ
    ͋ͳͨͱաͨ͝͠೔ʑΛ ͜ͷڳʹম͖෇͚Α͏ɹ
    ࢥ͍ग़͞ͳͯ͘΋ େৎ෉ͳΑ͏ʹ
    anatato sugoshita hibiwo kono muneni yaki
    tukeyou omoidasa nakutemo daijyoubu
    nayouni
    ashkmytondn → @ShkmYt0nDn
    Ͳ΍ͬ
    

    View Slide

29. ࢀߟ
    • ϑϨʔζɿʮΨʔωοτʯ(Ԟ՚ࢠ)ͷՎࢺΑΓ
    • ݩωλɿ

    ອըʮԦ༷ͨͪͷϰΝΠΩϯάʯʢখֶؗʣ
    ୈ̎רΑΓ
    

    View Slide