Heh - PIN analysis
From
DataGenetics:
PIN analysis
A good friend of mine, Ian, recently forwarded me an internet joke. The headline was something like:
�All credit card PIN numbers in the World leaked�
The body of the message simply said 0000 0001 0002 0003 0004
The author got 3.4 million PINs from data that had been hacked and released:
I was able to find almost 3.4 million four digit passwords. Every single one of the of the 10,000 combinations of digits from 0000 through to 9999 were represented in the dataset.
The most popular password is 1234 �
� it�s staggering how popular this password appears to be. Utterly staggering at the lack of imagination �
� nearly 11% of the 3.4 million passwords are 1234 !!!
The next most popular 4-digit PIN in use is 1111 with over 6% of passwords being this.
In third place is 0000 with almost 2%.
A staggering 26.83% of all passwords could be guessed by attempting these 20 combinations!
(Statistically, with 10,000 possible combination, if passwords were uniformly randomly distributed, we would expect the these twenty passwords to account for just 0.2% of the total, not the 26.83% encountered)
Looking more closely at the top few records, all the usual suspects are present 1111 2222 3333 � 9999 as well as 1212 and (snigger) 6969 .
It�s not a surprise to see patterns like 1122 and 1313 occurring high up in the list, nor 4321 or 1010 .
2001 makes an appearance at #19. 1984 follows not far behind in position #26, and James Bond fans may be interested to know 0007 is found between the two of them in position #23 (another variant 0070 follows not much further behind at #28).
The first �puzzling� password I encountered was 2580 in position #22. What is the significance of these digits? Why should so many people select this code to make it appear so high up the list?
Then I realized that 2580 is a straight down the middle of a telephone keypad!
Back when I had my computer store, it was an uphill battle to get people to use strong security for their passwords. Even something as simple as a collection of nonsense words (happyfoxlincoln123# for example) with a couple of numbers is a lot better than a spouses name or their car brand. 1234 is just plain stupid...
Posted by DaveH at September 19, 2012 3:19 PM