Quote from: kickingjamie on February 15, 2013, 12:23:52 PM

Quote from: HappyguyForum on February 15, 2013, 09:20:56 AM

Quote from: kickingjamie on February 14, 2013, 05:13:41 PM
Have you ever thought that websites like that could actually be stealing your passwords?

have you realized thats why i put "Trusted" sites... -_-
and btw, how could someone possibly log on to any website without any other info that a password. People can have the same password as you, and without any other info such as an email, username, etc, how would they be able to get into anything without installing a trojan...

Quote
They could take your IP, with your IP there is a lot of different things they could do. I'm not saying that they are, I'm just stating that websites could do it.

When people say "i have your ip" theres not much they can actully do. Did you know that people in your area have the same ip as you. There is a difference between your public ip, and your personal ip. The only way to get your personal ip is if you go on your computer and manually type into the prompt "ipconfig", the ip that shows on websites etc, will not get you anywhere because you could be dealing with hundreds of people at a time with that exact ip.

'Word lists' only contain actual words (and some common numbers appended to them).
Solution: Use a password which isn't an actual word - through in a symbol too.

Also I doubt the site is really trying to crack your password and giving you a response time.

Oh yeah FYI people trying to mass crack passwords will probably be using a cluster of PCs.

Quote
When people say "i have your ip" theres not much they can actully do. Did you know that people in your area have the same ip as you. There is a difference between your public ip, and your personal ip. The only way to get your personal ip is if you go on your computer and manually type into the prompt "ipconfig", the ip that shows on websites etc, will not get you anywhere because you could be dealing with hundreds of people at a time with that exact ip.

You're totally wrong. I'm going to use Runescape and specifically an account recovery method people use as an example. If someone has your IP they can find out what area you live in. If they know what area you live in they can use proxies based in that area. As Jagex check IP's against original account IP's as one of the methods of verifying you're the owner, if the Ip address's are equal to the same area then that's an extra point and therefore more chance of hacking the account. People don't need your exact address to do damage.

Great guide !