OT How safe is a 7-zip passworded file?

Using the latest version 7z920. When you zip up some files and use
the default AES-256 encryption with "encrypt file names" checked,
it's safe right?

Thanks.

On 1/5/2014 11:35 PM, John Doe wrote:
Using the latest version 7z920. When you zip up some files and use
the default AES-256 encryption with "encrypt file names" checked,
it's safe right?

Thanks.


AES256 is good.

What isn't good, is if you use the same password for everything.
That wouldn't be good.

Neither would a dictionary word be a good choice for
a password.

There are no simple answers for passwords. Passwords suck.
Simple enough to remember, the password will be easy to break.
Hard enough to prevent breakage, impossible to remember.

I keep a couple (infrequently used) passwords written on an envelope.
They include punctuation. Which is supposed to help. The larger
the "alphabet", the better. Long passwords are nice, except for
instances where data entry forms for the password aren't
wide enough.

For online passwords, you should be using two-factor authentication.
A number of the online services, have various forms of protection,
to make it harder to change the password on an account.

http://en.wikipedia.org/wiki/Multi-f...authentication

Paul

Paul nospam needed.com wrote:

John Doe wrote:

Using the latest version 7z920. When you zip up some files and
use the default AES-256 encryption with "encrypt file names"
checked, it's safe right?

AES256 is good.

What isn't good, is if you use the same password for everything.
That wouldn't be good.

Neither would a dictionary word be a good choice for a password.

There are no simple answers for passwords. Passwords suck.
Simple enough to remember, the password will be easy to break.
Hard enough to prevent breakage, impossible to remember.

I keep a couple (infrequently used) passwords written on an
envelope. They include punctuation. Which is supposed to help.
The larger the "alphabet", the better. Long passwords are nice,
except for instances where data entry forms for the password
aren't wide enough.

I keep all ordinary passwords in a file, so they are long and
random. I will start doing that for zip files too.

Paul wrote:

Simple enough to remember, the password will be easy to break.
Hard enough to prevent breakage, impossible to remember.

Not necessarily. See he

http://xkcd.com/936/

I don't know if I agree with the numbers, but what do you think is harder for
a computer to guess, "6hyrt%$U" or "Fudge Blank Monkey Stripe 3"?

With an archive, there's no worry about hitting a limit that locks you out of
the system, so given enough time and machines, either password *will* be
found.

--
My mind is occupied with thoughts of the future
and I have no time for idle chatter.

On 6/01/2014 12:35 PM, John Doe wrote:
Using the latest version 7z920. When you zip up some files and use
the default AES-256 encryption with "encrypt file names" checked,
it's safe right?

Really depend on the password, and all passwords are vulnerable to
dictionary attack?

--
@~@ Remain silent. Nothing from soldiers and magicians is real!
/ v \ Simplicity is Beauty! May the Force and farces be with you!
/( _ )\ (Fedora 19 i686) Linux 3.12.6-200.fc19.i686
^ ^ 18:18:01 up 9 min 0 users load average: 0.00 0.10 0.11
�借貸! ��騙! ��交! �打交! �打劫! �自殺! 請考慮綜� (CSSA):
http://www.swd.gov.hk/tc/index/site_...sub_addressesa

On Mon, 06 Jan 2014 00:18:02 -0500, Paul wrote:

On 1/5/2014 11:35 PM, John Doe wrote:
Using the latest version 7z920. When you zip up some files and use
the default AES-256 encryption with "encrypt file names" checked,
it's safe right?

Thanks.


AES256 is good.

What isn't good, is if you use the same password for everything.
That wouldn't be good.

Neither would a dictionary word be a good choice for
a password.

There are no simple answers for passwords. Passwords suck.
Simple enough to remember, the password will be easy to break.
Hard enough to prevent breakage, impossible to remember.

The way I handle this is to use an old song book and pick the first
letters of my favorite verse, the song number and page number to make
up my passwords then I associate that song with the particular item
the password is for. Gordon

I keep a couple (infrequently used) passwords written on an envelope.
They include punctuation. Which is supposed to help. The larger
the "alphabet", the better. Long passwords are nice, except for
instances where data entry forms for the password aren't
wide enough.

For online passwords, you should be using two-factor authentication.
A number of the online services, have various forms of protection,
to make it harder to change the password on an account.

http://en.wikipedia.org/wiki/Multi-f...authentication

Paul

On 6/01/2014 6:24 PM, Mr. Man-wai Chang wrote:
On 6/01/2014 12:35 PM, John Doe wrote:
Using the latest version 7z920. When you zip up some files and use
the default AES-256 encryption with "encrypt file names" checked,
it's safe right?

Really depend on the password, and all passwords are vulnerable to
dictionary attack?


And BTW, your government could always arrest your physical body in
reality for questioning!

--
@~@ Remain silent. Nothing from soldiers and magicians is real!
/ v \ Simplicity is Beauty! May the Force and farces be with you!
/( _ )\ (Fedora 19 i686) Linux 3.12.6-200.fc19.i686
^ ^ 23:03:02 up 4:54 0 users load average: 0.00 0.01 0.05
�借貸! ��騙! ��交! �打交! �打劫! �自殺! 請考慮綜� (CSSA):
http://www.swd.gov.hk/tc/index/site_...sub_addressesa

On 1/6/2014 10:11 AM, Mr. Man-wai Chang wrote:
On 6/01/2014 6:24 PM, Mr. Man-wai Chang wrote:
On 6/01/2014 12:35 PM, John Doe wrote:
Using the latest version 7z920. When you zip up some files and use
the default AES-256 encryption with "encrypt file names" checked,
it's safe right?

Really depend on the password, and all passwords are vulnerable to
dictionary attack?


And BTW, your government could always arrest your physical body in reality for questioning!


They can always use a keylogger.

Paul

On 06/01/2014 16:11, Mr. Man-wai Chang wrote:
On 6/01/2014 6:24 PM, Mr. Man-wai Chang wrote:
On 6/01/2014 12:35 PM, John Doe wrote:
Using the latest version 7z920. When you zip up some files and use
the default AES-256 encryption with "encrypt file names" checked,
it's safe right?

Really depend on the password, and all passwords are vulnerable to
dictionary attack?


And BTW, your government could always arrest your physical body in
reality for questioning!


No, Man-wai, YOUR government can do that. In the West, our government
spies on us until we make a mistake. Then they make a move...

On 6/01/2014 11:38 PM, Paul wrote:
On 1/6/2014 10:11 AM, Mr. Man-wai Chang wrote:
And BTW, your government could always arrest your physical body in
reality for questioning!

They can always use a keylogger.

That is, install malwares into your PC when you were away from home?

--
@~@ Remain silent. Nothing from soldiers and magicians is real!
/ v \ Simplicity is Beauty! May the Force and farces be with you!
/( _ )\ (Fedora 19 i686) Linux 3.12.6-200.fc19.i686
^ ^ 00:33:02 up 6:24 0 users load average: 0.16 0.05 0.06
�借貸! ��騙! ��交! �打交! �打劫! �自殺! 請考慮綜� (CSSA):
http://www.swd.gov.hk/tc/index/site_...sub_addressesa

On 7/01/2014 12:21 AM, occam wrote:
And BTW, your government could always arrest your physical body in
reality for questioning!

No, Man-wai, YOUR government can do that. In the West, our government
spies on us until we make a mistake. Then they make a move...

Mr. Snowden didn't say so.

--
@~@ Remain silent. Nothing from soldiers and magicians is real!
/ v \ Simplicity is Beauty! May the Force and farces be with you!
/( _ )\ (Fedora 19 i686) Linux 3.12.6-200.fc19.i686
^ ^ 00:33:02 up 6:24 0 users load average: 0.16 0.05 0.06
�借貸! ��騙! ��交! �打交! �打劫! �自殺! 請考慮綜� (CSSA):
http://www.swd.gov.hk/tc/index/site_...sub_addressesa

On 1/6/2014 11:40 AM, Mr. Man-wai Chang wrote:
On 6/01/2014 11:38 PM, Paul wrote:
On 1/6/2014 10:11 AM, Mr. Man-wai Chang wrote:
And BTW, your government could always arrest your physical body in
reality for questioning!

They can always use a keylogger.




That is, install malwares into your PC when you were away from home?


This is impossible if you turn off your computers when you are not using
it.

On Mon, 6 Jan 2014 04:35:18 +0000 (UTC), John Doe wrote:

Using the latest version 7z920.

Latest is 7-Zip 9.32 alpha. No reason not to use it. ;-)

--
s|b

On 1/06/2014, Mr. Man-wai Chang posted:
On 6/01/2014 11:38 PM, Paul wrote:
On 1/6/2014 10:11 AM, Mr. Man-wai Chang wrote:
And BTW, your government could always arrest your physical body in
reality for questioning!

They can always use a keylogger.

That is, install malwares into your PC when you were away from home?


They're even happy to do it when you *are* at home :-)

--
Gene E. Bloch (Stumbling Bloch)

On 06 Jan 2014, "s|b" wrote in
alt.comp.hardware.pc-homebuilt:

Latest is 7-Zip 9.32 alpha. No reason not to use it. ;-)

Seems to me there are good reasons not to use it. To wit:

"Don't use this alpha version to process important files and archives.
The code of this version contains big number of changes.
And probably there are some new BUGs."

"If you need more stable version, you can use previous versions: 7-Zip
9.25 alpha or 7-Zip 9.30 alpha."