I have used Yahoo voice in the past. I havent used it since 2010. Thank god that the password I used on Yahoo was my throw-away password (highly weak)

Its usually "password" or "123456". The end.

Yahoo has had consistent problems with JavaScript interface exploits that lets other sites send email "from" Yahoo users when those users have logged in and visit the infected sites.

That, and overall poor security practices.

Problems with Yahoo are not new, and are not going away. Anybody with any brains has switched to Google, or even MSN.

I always make my work computer's password something that would be fun to tell IT security over the phone if I'm ever fired. Favorites include:

- I'm not telling
- You're the genius, figure it out
- YEAH RIGHT
- Why do you need that?
- Go fistfark yourself

Any hacker that currently has my Yahoo e-mail password, could you please clean out my Inbox of the barrage of junk mail that Yahoo has no idea how to recognize as spam the next time your online? Thank you.

//My throw away e-mail account for sites that will probably spam me, because Yahoo e-mail is the worst of the freebie sites.

pkellmey: Any hacker that currently has my Yahoo e-mail password, could you please clean out my Inbox of the barrage of junk mail that Yahoo has no idea how to recognize as spam the next time your online? Thank you.

//My throw away e-mail account for sites that will probably spam me, because Yahoo e-mail is the worst of the freebie sites.

This.

I wondered what that was all about. I've had Yahooooo! Mail longer than I've had any street address ever

Good! Hopefully someone can delete all the spam I get while they're in there

yahoo never gave a shiat about spam as they have profited off of it over the years, so having your password stolen isn't even a change.

I've been using this for years: KeePass Password Safe. Now you only have to remember one password. There are also Android and IOS apps that support it. Freeware.

Do people even encrypt their password databases anymore?NutWrench: I've been using this for years: KeePass Password Safe. Now you only have to remember one password. There are also Android and IOS apps that support it. Freeware.

My respect for Murphy's law prevents me from handing off password management to a program. I can't help but believe that you are unbelievably farked if you ever change computers.

As someone who just locked up my account on of the databases I use at work I am getting a kick.

/If I am going to need a password for 5 different things, can we at least decide which characters are allowed and use the same for all five? Or at least tell you what characters are allowed at the login screen!!
//This one requires a letter and number, this one requires numbers only, this one wants a special character, this one can't handle special characters.
///Instead I have to remember 5 different passwords that need to be changed every 3 months. Thanks.

I have a nice system for creating passwords that I can remember, but remembering which variant each site needs is fun.

Bonus: one of the systems is kinda old and I used a special character to lead off the password and I think the software treated it as a command or script and I got a fun error message.

Any website developer that stores passwords as anything other than a hash or encrypted should be banned forever from developing web sites. In fact, even encrypting better have a good reason (and clear-text should be an immediate ban and mark of shame) -- There's no reason why the web admins should ever be able to know what your password is -- Store only a hash and if the password is lost, reset to a new one.

Crap. Now I have to change to my luggage combination too.

stolibro: Crap. Now I have to change to my luggage combination too.

Well-played.

They stored passwords in plain text, and then they tell ME how I'M should to be safe with my passwords???

/Storing passwords in plaintext should be a FCC fine or something

Hyjamon: As someone who just locked up my account on of the databases I use at work I am getting a kick.

/If I am going to need a password for 5 different things, can we at least decide which characters are allowed and use the same for all five? Or at least tell you what characters are allowed at the login screen!!
//This one requires a letter and number, this one requires numbers only, this one wants a special character, this one can't handle special characters.
///Instead I have to remember 5 different passwords that need to be changed every 3 months. Thanks.

I have a nice system for creating passwords that I can remember, but remembering which variant each site needs is fun.

Bonus: one of the systems is kinda old and I used a special character to lead off the password and I think the software treated it as a command or script and I got a fun error message.

FFS, this! I have a system that goes through multiple iterations to create my passwords, So, I can usually guess my paswords. However, I can't always remember the protocol for what characters are allowed for each site.

spentmiles: I always make my work computer's password something that would be fun to tell IT security over the phone if I'm ever fired. Favorites include:

- I'm not telling
- You're the genius, figure it out
- YEAH RIGHT
- Why do you need that?
- Go fistfark yourself

Only if you're ever fired? What about those weekly calls from them to verify things are in good order? I swear the people they hire to do that are getting harder and harder to understand, last week I could barely understand him because some sort of what I could only assume to be russian comedy was playing in the back ground. Talk about unprofessional.

/Storing passwords in plaintext should be a FCC fine or something

Same should go for unsalted MD5/SHA password hashes while we're at it...

ajeoae: /Storing passwords in plaintext should be a FCC fine or something

Same should go for unsalted MD5/SHA password hashes while we're at it...

Just the lack of SSO should be a PCI/HIPPA/SOX/etc violation. Anyone who has to remember multiple passwords at work and type them in all day long is going to start leaving them around or generating stupid variations of the same ones.

MFAWG: I wondered what that was all about. I've had Yahooooo! Mail longer than I've had any street address ever

I'm glad I'm not the only one.

I've been reading the txt file between compiles and some of the passwords are derptastic. hotmail accounts, not surprisingly, have the weakest passwords with gems like "spaceman" and "dogmonky", Oh yeah, then there's the toolbag at "bidmyreno.com" with the password Porsche911. Keep dreaming, buddy. Another guy's password was his first name. There are a LOT of people with qwerty123 as their password. A LOT. It's an entertaining read.

Anyone have a good herpaderp gif?

It had been so long since I logged into my Yahoo account that it asked me for Captcha-type thingy. The I re-read the articles and it was apparently Yahoo voice. Which I had never heard of. Changed the password anyway, and cleaned up some other info, and did NOT create a profile.

Also, +1 for Keepass.

LoneWolf343: Do people even encrypt their password databases anymore?NutWrench: I've been using this for years: KeePass Password Safe. Now you only have to remember one password. There are also Android and IOS apps that support it. Freeware.

My respect for Murphy's law prevents me from handing off password management to a program. I can't help but believe that you are unbelievably farked if you ever change computers.

Keepass will reside on multiple devices with multiple encryped databases. Phone included. Don't worry.

MFAWG: I wondered what that was all about. I've had Yahooooo! Mail longer than I've had any street address ever

I've had my Yahoo e-mail address for 15 years. It's my spamcatcher address, and I see no reason to change it any time soon.

Christ, 15 years...

I'm still pissed at Bank of America and other sites that don't allow special characters as part of the password.

Contents Under Pressure: I've been reading the txt file between compiles and some of the passwords are derptastic. hotmail accounts, not surprisingly, have the weakest passwords with gems like "spaceman" and "dogmonky", Oh yeah, then there's the toolbag at "bidmyreno.com" with the password Porsche911. Keep dreaming, buddy. Another guy's password was his first name. There are a LOT of people with qwerty123 as their password. A LOT. It's an entertaining read.

To be fair, a lot of them are probably throwaway accounts.

shiat. I was on there.