The Unexpected Word That Shows Up on Every Hacked-Password List

iStock
iStock

Every year, security-focused companies like SplashData release lists of the year's most hacked passwords, inevitably prompting us to ask, "Why would you make your password password?" In 2017, the most popular passwords list included longtime mainstays like 123456, qwerty, and, of course, password.

We get it, people aren't creative when they're coming up with their thousandth password. But WIRED (warning: paywall ahead) alerts us to one mainstay password that stands out from the pack, one that appears regularly on hacked password lists but has none of the obvious origins of passwords like hello or login. People love to make their password—drum roll, please—dragon.

WIRED investigated just why so many internet users use dragon to unlock their accounts, taking the question to password experts and security researchers.

Part of the reason, the magazine found, might just be related to the biases of these lists. They pull from leaked data from hacked sites, a dataset that doesn't always represent everyone on the internet. Depending on the user base of those hacked sites, the passwords also might represent specific groups (say, young dudes) who have more of a tendency to shout their love of fantastical winged reptiles from the rooftops.

The sites that get hacked and have their password data leaked to the world may not have had great security controls in the first place, either. Users might not have had to come up with extra numbers and special characters when generating a password. And the single-word dragon isn't as difficult for hackers to decode as some other passwords, so it's liable to be leaked. According to Keeper Security, many hackers can break a seven-digit password made up of upper- and lower-case letters and numbers in 10 seconds. Since dragon has already proved itself to be so popular, a hacker will probably go ahead and test that one out early.

Several people told WIRED they have used dragon as a password for years, just because, you know, they liked dragons. If you're a fan of Dungeons and Dragons, Harry Potter, Lord of the Rings, Game of Thrones, or, maybe even How to Train Your Dragon, dragon might be a super simple password to remember. And, because most people don't change their passwords as often as they should, you probably use it over and over again.

A similar reason might explain why words like football, monkey, and starwars often appear on these lists [PDF] year after year as well. People love football, monkeys, and Star Wars. Unfortunately, so do hackers.

Read the full rundown of why people love dragon—and why it's not a great way to protect the pile of gold that is your online data—here. As always, we will leave you with this reminder: Get a password manager. You don't want to end up as an embarrassing statistic on a password-shaming list.

[h/t WIRED]

Looking to Downsize? You Can Buy a 5-Room DIY Cabin on Amazon for Less Than $33,000

Five rooms of one's own.
Five rooms of one's own.
Allwood/Amazon

If you’ve already mastered DIY houses for birds and dogs, maybe it’s time you built one for yourself.

As Simplemost reports, there are a number of house kits that you can order on Amazon, and the Allwood Avalon Cabin Kit is one of the quaintest—and, at $32,990, most affordable—options. The 540-square-foot structure has enough space for a kitchen, a bathroom, a bedroom, and a sitting room—and there’s an additional 218-square-foot loft with the potential to be the coziest reading nook of all time.

You can opt for three larger rooms if you're willing to skip the kitchen and bathroom.Allwood/Amazon

The construction process might not be a great idea for someone who’s never picked up a hammer, but you don’t need an architectural degree to tackle it. Step-by-step instructions and all materials are included, so it’s a little like a high-level IKEA project. According to the Amazon listing, it takes two adults about a week to complete. Since the Nordic wood walls are reinforced with steel rods, the house can withstand winds up to 120 mph, and you can pay an extra $1000 to upgrade from double-glass windows and doors to triple-glass for added fortification.

Sadly, the cool ceiling lamp is not included.Allwood/Amazon

Though everything you need for the shell of the house comes in the kit, you will need to purchase whatever goes inside it: toilet, shower, sink, stove, insulation, and all other furnishings. You can also customize the blueprint to fit your own plans for the space; maybe, for example, you’re going to use the house as a small event venue, and you’d rather have two or three large, airy rooms and no kitchen or bedroom.

Intrigued? Find out more here.

[h/t Simplemost]

This article contains affiliate links to products selected by our editors. Mental Floss may receive a commission for purchases made through these links.

More Than 38,000 Pounds of Ground Beef Has Been Recalled

Beef-ware.
Beef-ware.
Angele J, Pexels

Your lettuce-based summer salads are safe for the moment, but there are other products you should be careful about using these days: Certain brands of hand sanitizer, for example, have been recalled for containing methanol. And as Real Simple reports, the U.S. Department of Agriculture’s Food Safety Inspection Service (FSIS) recently recalled 38,406 pounds of ground beef.

When JBS Food Canada ULC shipped the beef over the border from its plant in Alberta, Canada, it somehow skirted the import reinspection process, so FSIS never verified that it met U.S. food safety standards. In other words, we don’t know if there’s anything wrong with it—and no reports of illness have been tied to it so far—but eating unapproved beef is simply not worth the risk.

The beef entered the country on July 13 as raw, frozen, boneless head meat products, and Balter Meat Company processed it into 80-pound boxes of ground beef. It was sent to holding locations in Florida, Georgia, North Carolina, and South Carolina before heading to retailers that may not be specific to those four states. According to a press release, FSIS will post the list of retailers on its website after it confirms them.

In the meantime, it’s up to consumers to toss any ground beef with labels that match those here [PDF]. Keep an eye out for lot codes 2020A and 2030A, establishment number 11126, and use-or-freeze-by dates August 9 and August 10.

[h/t Real Simple]