1_2_9 Section 1 – Attacks, Threats, and Vulnerabilities - 1.2 – Attack Types - Password Attacks

What is the main reason an attacker loves applications that store passwords as plain text?

Why is storing passwords as plain text considered a security risk?

What is the recommended method for storing passwords securely?

What is unique about the hash of a password?

Why is hashing considered a secure method for storing passwords?

What should you do if you encounter an application storing passwords as plain text?

What is the primary characteristic of a cryptographic algorithm mentioned in the text?

What hashing algorithm was specifically discussed in the text?

How does a spraying attack differ from brute force attacks?

In the context of password attacks, what does 'querty' represent?

What is the purpose of using 'common passwords' in password attacks?

What is one reason an attacker might choose a spraying attack over a brute force attack?

Why are the hashes of common passwords provided in the text?

'Brute force attacks' aim to find passwords by trying:

'Spraying attacks' try to avoid alarms by:

What do attackers aim to obtain in a brute force attack?

What is the purpose of adding a salt to passwords?

How does the addition of salt affect the hash of identical passwords?

What is the main challenge associated with rainbow tables?

Why was 'collection number one' significant in January 2019?

What impact does salting passwords have on pre-built tables like rainbow tables?

How do salts contribute to the security of stored passwords?

Why is it essential for each user to have a unique salt added to their password?

What is the purpose of having a password manager that generates different passwords for each account?

What kind of data is a 'salt' when used in password hashing?

What does 'haveibeenpwned.com' allow users to check for?

What type of attack involves programmatically stepping through every possible combination of a password offline?

In a dictionary attack, attackers use common words from dictionaries to guess passwords. What is another feature of these attacks?

What is the purpose of rainbow tables in password cracking?

Why do attackers often use distributed cracking formats?

What would be the outcome if an account is locked out after a few failed login attempts?

What type of characters are typically included in a brute force attack on passwords?

What technique is used in some password cracking programs to try variations like changing 'A' to '&' and 'O' to '0'?

Which type of attack involves using high-speed CPUs found in GPUs to quickly crack passwords?

What is the function of hashing passwords in the context of password cracking?

What type of attack often locks accounts out after multiple failed login attempts?

Why is storing passwords as plain text considered a security risk?

What is the main advantage of hashing passwords instead of storing them as plain text?

Why are hashes considered a more secure method for storing passwords than encryption?

What is the primary risk associated with applications that store passwords in plain text?

How does hashing of passwords contribute to data security?

What is the significance of using a hash to store passwords?

What type of attack involves going through every possible combination of letters, numbers, and special characters offline?

In password cracking, what method allows attackers to quickly search for previously computed hashes?

What type of attack uses commonly found words, including those from specific dictionaries?

Which method allows attackers to quickly identify common passwords like 'ninja' and 'dragon'?

What technique involves changing characters like 'A' to '&' and 'O' to '0' during password cracking attempts?

How do attackers speed up the process of offline password cracking by utilizing external hardware?

Why is it more efficient for attackers to use a subset of words from a dictionary during password cracking?

What impact does salting passwords have on pre-built tables like rainbow tables?

Why is having a unique salt added to each password considered important for security?

Why is it impossible to restore a hashed password back to its original format?

What characteristic of hashing makes it a secure method for storing passwords?

What is the primary purpose of a spraying attack compared to a brute force attack?

What purpose do rainbow tables serve in password cracking?

What makes a brute force attack time-consuming when trying to crack passwords?

In password cracking, what is the purpose of using 'common passwords' like '1, 2, 3, 4, 5, 6'?

What extra security measure do programmers use to store passwords besides hashing?

What differentiates salts from plain text passwords stored in a database?

What role does the hashing algorithm play in password security?

What distinguishes a spraying attack from a brute force attack in terms of strategy?

Why does using 'haveibeenpwned.com' help users determine if their accounts are at risk?

How does including a salt with passwords make rainbow tables less effective?

How does adding a salt to passwords enhance security?

Why is 'collection number one' significant in the context of data breaches?

'1, 2, 3, 4, 5, 6' and 'querty' were mentioned in the text as examples of what?

What makes rainbow tables ineffective when attacking salted passwords?

What is a notable characteristic of a cryptographic algorithm?