Endless Paradigm

Full Version: Study shows phone passcodes are predictable
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
For those interested in stealing a phone or plugging through your friends' without their consent, perhaps:

Quote:Just 10 different passcodes would be enough to unlock one in seven iPhones, according to research by a developer of apps for the iPhone.

Daniel Amitay blogged how he anonymously gathered passcodes for his Big Brother iPhone app, and making the assumption that his customers would use the same passcode as they did for their iPhone, came up with the statistic that 15% of all passcode sets were represented by only 10 different passcodes (out of a possible 10,000).

[...]

Amitay’s Big Brother Camera Security app (which has now been dropped from the appstore because Apple isn’t very happy with what Amitay has been doing) has a passcode setup screen and lock screen that are nearly identical to those of the actual iPhone passcode lock. He extrapolated that the collected information would closely correlate with actual iPhone passcodes - not necessarily the case, as users may well be more careful with more ‘important’ passcodes.

[Image: page1_blog_entry6-most_common_passcodes.png]

The information gathered was worryingly predictable. As the above graph shows, out of 204,508 recorded passcodes, the top ten most common were 1234, 0000, 2580, 1111, 5555, 5683, 0852, 2222, 1212, and 1998. Which is a very depressing list indeed if you are concerned about user security.

Most of these codes follow formulae such as four identical digits, moving in a line up or down the pad, or repetition. If you’re wondering about 5683, it’s the numeric representation of ‘L-O-V-E’ on your phone (aaaahhh). Other common passwords in the top 50 were probable birth or graduation years - 1980-2000.

If you also look at the frequency of each digit chosen you find that the entropy only increases as the digit order goes on. That is the most used first digit is one, the most used second digit is two with only the third and fourth digits looking anything like an even spread across the choices. What this means is that of a four digit pin only the final two digits are actually serving their full purpose.

[Image: blog_entry6-first_digit.png]
Source: http://www.i-programmer.info/news/149-se...codes.html

Well, considering that these numbers are often based on some real numerical value, not surprising that many start with 1 or 2 (see also Benfold's law).
Passcode or password?
I never had much to hide on my phone anyway. I don't have any lock passcode enabled because I find it annoying...

the only thing I find useful about them is that back when phones were the size of bricks and you kept them in your pocket it would prevent you from random button mash calling people...
I thought that was there only real purpose to begin with...
now with the age of touchscreens or with a phone who's unlock button isn't so easily pressed in your pocket I think passcodes are something that have just sort of grandfathered into phones. It's not required but wee have yet to phase out of it.

another thing, if I lose my phone and it's locked and passcoded how do I expect anyone who wants to attempt to return my phone, to figure out whose phone it is?
my iPhone uses a password, rather than a 4 digit passcode, even when it was numbers i used an 8-digit passcode.
silly iPhone peasants.
I'll just sit here with my Android phone and it's "draw a shape to unlock" system.
Numbers, pfft.
draw a shape to unlock is gay

just look at the fingerprint marks on the screen and there you have your unlock pattern.
: > I HAD a mod that let me draw, my passcode was a key. : >
ProperBritish Wrote: [ -> ]draw a shape to unlock is gay

Hey buddy I like drawing shapes, and for your information I am a flaming homosexual so you can stick it in your anus and call it "manly men's for men only" because I don't need it :"3
i don't mean actually homosexual ^^"
He's watching you.
lol even other phones its now can easily unlock, but yeah most people do use password simpler that they can remember, lol
Reference URL's