扫码加入训练营

牢记核心词

学习得礼盒

2015考研英语阅读英文原刊《经济学人》:电脑密码

2014-08-22 16:59:58来源:新东方在线编辑整理

  For some sites, laxity may be rational, since their passwords are not protecting anythingparticularly valuable, such as credit-card details.

  对一些站点来说,在安全防范上的相对松弛是可以理解的,因为它们站设置的密码并非为了保护类似信用卡信息这样特别重要的内容。

  But password laxity imposes costs even on sites with good security, since people often usethe same password for several different places.

  但即使对拥有良好安全防范措施的网站来说,密码系统上的疏于防范也会大大增加花费,因为人们喜欢在多个地方使用同一个密码。

  One suggestion is that lax password security is a cultural remnant of the internet'sinnocent youth—an academic research network has few reasons to worry about hackers.

  有一种说法认为他们在密码上防范疏松的做法乃是源于网上那群不谙世事的年青一代的文化特征-一个专门用于学术研究的网络几乎不需担心黑客入侵。

  Another possibility is that because many sites begin as cash-strapped start-ups, for whichimplementing extra password security would take up valuable programming time, theyskimp on it at the beginning and then never bother to change.

  还有一种可能是许多网站在建站初期都面临资金短缺的问题,而为系统配上更安全的保护措施会消耗大量宝贵的编程时间,因此他们一开始就在这一步上偷工减料,然后再也懒得去加以改善了。

  But whatever the reason, it behoves those unwilling to wait for websites to get their actstogether to consider the alternatives to traditional passwords.

  无论原因何在,与其等待所有网站都建立起一个完善的密码保护系统的那一天到来,不如由我们自己想出一个传统密码的替代方案。

  One such is multi-word passwords called passphrases.

  其中一种选择是使用密码组,

  Using several words instead of one means an attacker has to guess more letters, whichcreates more security—but only if the phrase chosen is not one likely to turn up, throughfamiliar usage, in a dictionary of phrases.

  它由多个词组合起来形成,使用多个词而不是一个词用作密码的优势在于:这使得破解者需要猜出更多的字母,从而提高了密码的安全性-但前提是选择的词组不能是词典里经常出现的惯用语,

  Which, of course, it often is.

  可惜这个前提常常未被满足。

  Mr Bonneau and his colleague Ekaterina Shutova have analysed a real-world passphrasesystem employed by Amazon, an online retailer that allowed its American users to employpassphrases between October 2009 and February 2012.

  Mr Bonneau和他的同事Ekaterina Shutova曾经研究过一个真实的密码组系统,该系统由网上零售商Amazon使用,Amazon曾与2009年10月至2012年2月间允许他们的用户使用密码组作为密码。

  They found that, although passphrases do offer better security than passwords, they are notas good as had been hoped.

  他们发现,密码组虽然较一般密码而言安全性更高,但实际效果并不如预期中好。

  A phrase of four or five randomly chosen words is fairly secure. But remembering severalsuch phrases is no easier than remembering several randomly chosen passwords.

  用一串由4,5个随机选择的词组合成密码是相当安全的,但问题是记住这样一些组合并不比那些随机选择的密码容易。

  Once again, the need for memorability is a boon to attackers.

  又一次,密码需具备易记性成为了破解者的福音。

  By scraping the internet for lists of things like film titles, sporting phrases and slang, MrBonneau and Dr Shutova were able to construct a 20,656-word dictionary that unlocked1.13% of the accounts in Amazon's database.

  通过在网上一点点搜集像电影名,体育相关用语和俚语这样的一个个词组,Mr Bonneau和Dr Shutova编制了一部囊括了20,656个词的字典,它已经成功开启了Amazon数据库里1.13%的账号。

  The researchers also suspected that even those who do not use famous phrases would stillprefer patterns found in natural language over true randomness.

  研究人员还怀疑,即使是那些不使用著名短语的,他们也会更倾向于按照自然语言中得模式而不会安全基于随机性。

  So they compared their collection of passphrases with two-word phrases extracted atrandom from the British National Corpus, and from the Google NGram Corpus.

  所以他们将收集的密码组同从英国国家语料库中随机选取的两词组合短词,还有google的Google NGramCorpus进行了比较。

  Sure enough, they found considerable overlap between structures common in ordinaryEnglish and the phrases chosen by Amazon's users.

  果然,他们发现在惯常英语中得常见结构与Amazon的用户所选的短语间出现了一定程度的重叠。

  Some 13% of the adjective-noun constructions which the researchers tried were on themoney, as were 5% of adverb-verb mixes.

  在研究人员分析的样本里面,在与金钱有关的组合中,有13%的形容词-名词,而副词-动词则达到了5%。

  One way round that is to combine the ideas of a password and a passphrase into a so-calledmnemonic password.

  一个折中的解决办法是将普通密码和密码组的概念揉合成一种所谓的助记性密码,

  This is a string of apparent gibberish which is not actually too hard to remember.

  它是一种看起来莫名其妙的字符串,但实际上要记住并不太难。

  It can be formed, for example, by using the first letter of each word in a phrase, varyingupper and lower case, and substituting some symbols for others—8 for B, for instance.

  助记性密码可以这样形成:挑出一个词组里每个单词的第一个字母,可以将其中一些进行大小写变化,另外一些则用某些符号来代替,例如8代替B。

  Even mnemonic passwords, however, are not invulnerable.

  然而,助记密码也并非是牢不可破的。

  A study published in 2006 cracked 4% of the mnemonics in a sample using a dictionary basedon song lyrics, film titles and the like.

  在2006年就有一项公布的研究成果显示一个样本里4%的助记密码遭到破解,手段是利用一部基于歌词,电影名及相似内容的字典。

  The upshot is that there is probably no right answer.

  看来这个难题是找不到完美的答案了。

  All security is irritating,and there is a constant tension between people's desire to besafe and their desire for things to be simple.

  任何安全措施都是烦人的。在人们对安全的需求及万事从简的愿望间存在着不可调和的矛盾。

  While that tension persists, the hacker will always get through.

  只要这种矛盾存在,黑客们就总能找到.

  词语解释

  1.need to 需要做

  We need to stop trade protectionism.

  我们需要制止贸易保护主义。

  Three things need to happen.

  我们必须做好三件事。

  2.easy to 便于

  The interface is clean and easy to use.

  它的界面很清爽,便于使用。

  It is easy to understand mrs obama's frustration.

  人们很容易理解奥巴马夫人的恼怒而又不知所措。

  3.seek to 设法;企图,试图

  Yet some expect him to seek to remove term limits.

  可是,部分人士期望他设法废除任期限制。

  And they seek to benefit from tiny operational changes.

  他们也自生产流程的细微变更中寻求收益。

  4.work out 解决;作出

  Britain, too, must work out what it wants from the eu.

  英国也必须解决一个问题,即本国想从欧盟得到什么。

  New cars often suffer quality glitches that auto makers try to work out over time.

  新款汽车常常存在质量上的毛病,需要生产商花时间来解决。

  进入8月,很多高校2015年考研招生简章已经发布,请广大15年考生关注,预计到8月底9月初,2015年全国硕士研究生招生简章会陆续发布完成,新东方在线小编第一时间跟踪发布,请大家收藏关注!另有研究生专业目录考研参考书等最新考研信息,帮助考生及时了解目标院校招生政策及信息。另有西医综合专业考试


新东方名师考研课程 购买进行中

考研英语核心词汇营

背词+听课+练习+督学,学习得礼盒

更多资料
更多>>
更多内容

关注新东方在线考研服务号

获得21考研真题及答案解析

1. 打开手机微信【扫一扫】,识别上方二维码;
2.点击【关注公众号】,获取资料大礼包。

近10年考研真题及答案免费下载
更多>>
更多公开课>>
更多>>
更多资料