this post was submitted on 26 May 2024
279 points (98.3% liked)

Cybersecurity

8626 readers
133 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
 

or why it is not a good idea to use your birthday as your pin

all 41 comments
sorted by: hot top controversial new old
[–] kylian0087@lemmy.dbzer0.com 75 points 2 years ago (3 children)

My pin is 4580 so I am good!

[–] steal_your_face@lemmy.ml 23 points 2 years ago (1 children)

Mine is the price of a cheese pizza and large soda at Panucci's

[–] Potatos_are_not_friends@lemmy.world 14 points 2 years ago (2 children)

Holy shit we have the same bank pin!

[–] sugar_in_your_tea@sh.itjust.works 14 points 2 years ago (2 children)

Hold up, mine too! I wonder if there's a connection with the card number and expiration date. Here'a mine, enter yours so we can all compare:

  • 5894325796533678
  • 11/25
[–] corsicanguppy@lemmy.ca 7 points 2 years ago (1 children)

Make sure to include the ccv code.

[–] Aussiemandeus@aussie.zone 2 points 2 years ago

Thanks doe the pizza man

[–] TrippaSnippa@lemm.ee 4 points 2 years ago

I have the same combination on my luggage!

[–] Gestrid@lemmy.ca 12 points 2 years ago (1 children)

Why is it all I see is ****?

[–] envelope@kbin.social 31 points 2 years ago (1 children)

6969 looks like a popular choice. Nice.

[–] sugar_in_your_tea@sh.itjust.works 4 points 2 years ago (1 children)

Looks like 4200 is fairly popular too. Blaze it!

[–] IllNess@infosec.pub 3 points 2 years ago

0420 seems to be popular also.

[–] Kolanaki@yiffit.net 24 points 2 years ago (1 children)

So the black pixels are pins that nobody uses? 🤔

[–] Gork@lemm.ee 10 points 2 years ago

We don't speak of those PINs here.

[–] kubica@kbin.social 18 points 2 years ago (1 children)

It bothers me that if the pin resembles a date, even if it is not the reason for it, it is less secure. Life is not fair, lol.

[–] onion@feddit.de 10 points 2 years ago

It bothers me that the arrow on the y-axis is pointing the wrong way

[–] cron@feddit.de 13 points 2 years ago (3 children)

Can someone create a list of the most secure 4-digit PINs?

[–] user224@lemmy.sdf.org 29 points 2 years ago

Umm... wouldn't that... you know... invalidate it?

[–] IllNess@infosec.pub 6 points 2 years ago

4 digit pins are not secure. As long as you avoid all the light colored dots on the chart, that's the most secure you can make it.

If a system allows brute forcing without a pause, delay, cool down, or lockout, and a 4 digit pin is the only thing preventing access, they will get in.

[–] ramble81@lemm.ee 6 points 2 years ago* (last edited 2 years ago) (1 children)

It’s hard to look at but any of the ones that are black squares in the picture would be the least used ones. It looks like that’s most any that starts in the 7000+ range.

Edit: 6806 for example.

[–] cron@feddit.de 7 points 2 years ago

Thanks for the thoughtful answer, but my question was actually meant as a joke.

[–] TonyTonyChopper@mander.xyz 10 points 2 years ago (1 children)

When will we finally move past 4 digit codes for anything important?

[–] ThetaDev@lemm.ee 10 points 2 years ago

Pin codes are great for quick access if you have a lockout mechanism after 3 failed attempts and it is impossible for an attacker to get the hashed code. It is only secure if you pick a pin that cannot be guessed in 3 attempts like your birthdate but that applies to any password.

Thats why they are used for credit cards, SIM cards or Bitlocker drive encryption. The hashed code never leaves the secure hardware so you cannot circumvent the lockout.

Even a 16digit numeric code, which I guess is the upper limit of what you can remember and quickly input, would take just a couple of days to brute force if the attacker does get hold of the hash.

[–] Creat@discuss.tchncs.de 9 points 2 years ago* (last edited 2 years ago) (3 children)

What's with 7942 being lit up like the North Star?

There are a couple other curious ones like that, too.

[–] Philippe23@lemmy.ca 5 points 2 years ago (1 children)

Are you sure that's not 7931 you're looking at?

7931 are the four corners, so it'd be an easy pattern.

[–] Creat@discuss.tchncs.de 3 points 2 years ago

Yes the bright one I mean is very easily at or around 40. 31 is rather far away.

[–] skyspydude1@lemmy.world 4 points 2 years ago

Maybe they're big fans of the Lego Off-road Fire Rescue set?

[–] doofusmagoo@sh.itjust.works 4 points 2 years ago (1 children)

What's with 7942 being lit up like the North Star?

Only thing I can think of is that The Hitchhiker's Guide to the Galaxy was published in 1979.

[–] Creat@discuss.tchncs.de 2 points 2 years ago

That actually might be it. And it fits the theme of 42 well.

[–] takeheart@lemmy.world 6 points 2 years ago (2 children)

Anecdotal but I've heard that when banks auto generate PINs for debit cards they filter out some suspicious ones like 0000 or 1234 because it only leads to customers complaining and wanting to change them (more work for the bank). Nowadays the customer can usually change them themselves, so it might be less true.

[–] Canadian_Cabinet@lemmy.ca 3 points 2 years ago

When I got my credit card (and credit account) set up, they had me set a pin then and there. But that might be because I had to create the account in person?

[–] user224@lemmy.sdf.org 2 points 2 years ago

Maybe they can, but it may not be free.

Up until a few months ago my bank used to charge €5 for PIN change at the ATM (unpaid accounts only).

[–] FauxPseudo@lemmy.world 3 points 2 years ago (1 children)

Star Trek fans are visible at 1707

[–] boeman@lemmy.world 9 points 2 years ago (1 children)
[–] FauxPseudo@lemmy.world 3 points 2 years ago

I must be more asleep than I thought.

[–] blujan@sopuli.xyz 1 points 2 years ago

I'm proud that 1996 seems to be one of the years least used, but damn is it sad anyways how used it is.

[–] cordlesslamp@lemmy.today 1 points 2 years ago

My PIN is the date I bought my first smartphone but the numbers are rearranged.