Skip to main content

Hotmail bans commonly used passwords, introduces 'My friend's been hacked!' feature

In an endeavour to keep users' email accounts safe from hacking, Hotmail is now banning commonly used passwords such as “password”, “123456”, “ilovecats” and “gogiants”. While signing up for its email service, Hotmail will notify the users about such passwords.

“This new feature will be rolling out soon, and will prevent you from choosing a very common password when you sign up for an account or when you change your password. If you're already using a common password, you may, at some point in the future, be asked to change it to a stronger password,” says Dick Craddock, Group Program Manager at Hotmail.
“Of course, having a strong password is just one step to protecting your account. You should also provide “proofs,” including an alternate email address, a question and secret answer, and, even a mobile number where we can reach you via text message. You can learn more about how to set up account proofs, or go ahead and set up your account proofs now,” he adds.

Hotmail also highlights the fact that common passwords pus users account at risk and make them vulnerable to dictionary attacks. The Hotmail subscribers already using any of the banned passwords will be soon notified about choosing a stronger and harder to guess password.

“My friend's been hacked!”

Hotmail has introduced a new feature to its email service called “My friend's been hacked”. The new feature enables the users to report to Hotmail about any email account they believe has been hacked. With the new feature the users can mark a message with a 'My friend's been hacked' label.




The Hotmail subscribers can also report about a compromised account when they mark a message as junk or otherwise move a message to the Junk folder:




“When you report that your friend’s account has been compromised, Hotmail takes that report and combines it with the other information from the compromise detection engine to determine if the account in question has in fact been hijacked,” says Dick Craddock.

“It turns out that the report that comes from you can be one of the strongest “signals” to the detection engine, since you may be the first to notice the compromise. So, when you help out this way, it makes a big difference!”

The notable aspect of the new feature is that it works for any email account. Elaborating the aspect, Craddock says, “Even if you’re a Hotmail user, you probably get email from friends using other email providers, and those accounts can get compromised, too.”

“We did the work to enable other email providers like Yahoo and Gmail to receive these compromise reports from Hotmail including those submitted by you, and those providers will now be able to use the reports in their own systems to recover hacked accounts.”

Hotmail's fresh attempt to ward off hacking is certainly a welcome move. Other leading email service providers like Gmail and Yahoo will also be now prompted to come up with similar features. Hacking is now very common and many have fallen prey to it. However, do you also think banning commonly used passwords will make any difference? Let us know what you think in the comment section below:


Post Credit: Think Digit (By: Kul Bhusan)

Comments

Popular posts from this blog

Characteristics of a Good Programming Language

Till now there are many high level languages which are very popular, and there are others, which could not become so popular in-spite of being very powerful. There might be many reasons for the success of a language, but one obvious reason is the characteristics of the language. Several characteristics believed to be important with respect to making a programming language good are briefly discussed below. Simplicity A good programming language must be simple and easy to learn and use. For example, BASIC is liked by many programmers only because of its simplicity. Thus, a good programming language should provide a programmer with a clear, simple and unified set of concepts which can be easily grasped. It is also easy to develop and implement a compiler or an interpreter for a programming language that is simple. However, the power needed for the language should not be sacrificed for simplicity. The overall simplicity of a programming language strongly affects the readability of the pr...

Angular 4 and Firebase Authentication: Email/Password

In our  previous  article we saw how to create authentication module using Google identity provider. Now we will see how to implement Email and Password authentication using Firebase. We will use Bootstrap form to create intuitive user interface for sign-up and login using Email and Password. Step 1: Create signUp component. ng generate component signUp Step 2: Create custom form in sign-up.component.html file. The result of above code: Step 3: Add two functions for creating the user and login using Email and Password in src/app/providers/AFAuth.ts file. Step 4: Call createUserWithEmailAndPassword function in service from sign-up.component.ts. Step 5: Update routing configuration in app.module.ts  to include signUp component. Step 6: Update Login form to have Bootstrap form. The result of the above code. Step 7: Enable Email/Password component in Firebas...

Angular 4 and Firebase Authentication: Setup

If you have come to this article, it means you are keen to learn new technology and that too Firebase. I love Firebase because it provides all basic but important features of any web application. Take for example, authentication, which is cumbersome and risky if not implemented with utmost care. And when we have the integration of Angular and Firebase, it becomes a lot easier for a developer to build such crucial modules in less time with minimal efforts. In this article we will create a simple Angular application using Firebase. I am going ahead with the understanding that you know the benefits of Firebase and have little knowledge about it. There are plenty of posts out on the web if you are behind. Step 1: Install Angular CLI (if not installed). npm install -g angular-cli Step 2: Create new Angular 4 project. By default now angular CLI will create Angular 4 project so you need not fret. ng new firebase-authentication Step 3: Check whether the ne...