The recent LinkedIn security breach, in which more than 60% of hashed passwords that were accessed by hackers from a LinkedIn password database and posted online, is a wake up call to everyone.
Whether you access LinkedIn or other social networks – or any sites for that matter using a computer, smartphone or tablet, the fact is, clearly more security is required.
Some reports say that LinkedIn hackers also accessed usernames, which could make it easier for them to get into accounts. Others say that the mobile app calendar features weren’t secure in this case.
Whatever the case, security breaches happen more often than most users know. Unfortunately, it takes a well-known organization to experience a large data breach – one that hits close to home, before IT and users reevaluate their own situation.
Mobile devices are even more vulnerable to data breaches, in terms of theft, getting lost, or having simple, easy-to-type passwords for apps and access. Let’s face it, you’ve got a mobile device for convenience. Who wants to type in a 15-character password with symbols, numbers and upper and lowercase letters using a tiny keyboard that’s not made for big fingers?
But alas, reality has struck once again. Passwords ARE stolen. Mobile APPs CAN be risky, security breaches CAN and DO happen.
The other reality is, mobile devices are not going away. For the enterprise, it means IT professionals and users must be cautious and on their toes, at all times.
Hopefully the LinkedIn breach is a wake up call to all, making mobile computing – and its users – more secure and cautious in the future.
Many of the passwords used today are very common. Consider this list from Mashable highlighting many from a recent LinkedIn breach (not sure if its the same as what you've referenced).
http://mashable.com/2012/06/08/linkedin-stolen-passwords-list/
In the mid-90's, I received the following advice that seems to hold true (I'm not a security expert). "Pick a word you'll remember. Place a number in the middle."
However, as pointed out with the LinkedIn breach, even the best password doesn't matter if there's a breach.