Size Does Matter!

Here at All In Energy, one of our strengths is our diverse team. Our team is diverse in race, gender identity, cultural backgrounds, professional experience, interests and more. We all have unique perspectives and together we make our work to advance an inclusive clean energy economy stronger - and also more fun! In this blog series, we are inviting each of our team members to write a blog that shares a bit about themselves, what they are passionate about, and how that connects to their work at All In Energy. In this month's blog, we hear from our Data Integration Manager, Jimmy Hikmatullah, from our data team about one of his passions (and part of his role): data security. Read more to get to know Jimmy and learn from his expertise.

Imagine Tony, an employee at a company, who was given the task of gathering a lot of customer information into one place. Tony, not really familiar with cybersecurity, did his best and set up everything with a simple password (something like "password1234"). He didn't think much about security, just wanted to get the job done. One day, a hacker got in using ransomware, locking up all the data and demanding a hefty ransom to unlock it. Tony was shocked and devastated as the company's operations came to a halt, and all that sensitive customer information was compromised.

This might sound like a made-up story, but something very similar happened to the Indonesian government recently in July, showing us just how important good cybersecurity practices are. As an Indonesian citizen, this is really embarrassing. A big government like Indonesia, which is the fourth largest country in the world by population. It's quite shameful that something like this happened, but there's an important lesson to be learned here: things can go really, really wrong with a weak password. That's where a password manager comes in.

Ilovetonystarksomuchidie vs Unit3dStates2022!

Source: https://xkcd.com/936/ By Randall Monroe

To really secure your online life, you need two things: a reliable password manager and a really strong password. Let’s talk about the strong password first. There's a common joke in the cybersecurity community: "Size does matter!" And it's absolutely true for passwords. Even if you use a password that's all lowercase but stretches to 20 characters long, it's going to be much more secure than a fancy mix of letters, numbers, and symbols that's only eight characters long. The strength of a password is not just about the combination of characters—it's primarily about the length. Feel free to test your potential password on this website to know how strong it is!

Managers, Managers, Managers

Now that we understand the importance of a strong password, let's briefly touch on how a password manager can help. A password manager is a tool that securely stores and manages your passwords for different accounts, so you don't have to remember each one. It can generate strong, unique passwords for each site and fill them in automatically when you need them. This way, you only need to remember one master password—just make sure it's a strong one!
There are mainly two types of password managers: managed-based services and local-based applications. Each has its own set of pros and cons.

Managed-Based Password Managers:

E.g: 1password, LastPass, GooglePassword, BitWarden

Pros:

• Accessible from anywhere with an internet connection
• Automatically syncs across all your devices
• Regular updates and security patches from the provider

Cons:

• Potential vulnerability if the service provider is hacked
• Requires internet access to use
• Dependent on the provider’s security practices

Local-Based Password Managers:

E.g: Managers, Managers, ManagersNow that we understand the importance of a strong password, let's briefly touch on how a password manager can help. A password manager is a tool that securely stores and manages your passwords for different accounts, so you don't have to remember each one. It can generate strong, unique passwords for each site and fill them in automatically when you need them. This way, you only need to remember one master password—just make sure it's a strong one!
There are mainly two types of password managers: managed-based services and local-based applications. Each has its own set of pros and cons.

Managed-Based Password Managers:

E.g: 1password, LastPass, GooglePassword, BitWarden

​Pros:

• Accessible from anywhere with an internet connection
• Automatically syncs across all your devices
• Regular updates and security patches from the provider

Cons:

• Potential vulnerability if the service provider is hacked
• Requires internet access to use
• Dependent on the provider’s security practices

​Local-Based Password Managers:

E.g: KeeWeb, KeePass, Enpass

Pros:

• Stores your data locally, reducing the risk of external breaches
• Doesn’t require an internet connection to access your passwords
• Full control over your data and security settings

Cons:

• Limited to the device it’s installed on unless manually synced
• May require more technical know-how to manage backups and updates
• Risk of data loss if the device is lost or damaged

Always do your own research to find which type of password manager fits your needs best. There is no one-size-fits-all solution, and the right choice depends on your specific requirements and preferences. Remember, the cybersecurity landscape is always evolving, so staying informed is key to staying secure.

My 2¢

This blog is just my two cents. As mentioned previously, I am not a security expert. The world of cybersecurity is incredibly dynamic and fast-paced. Threats evolve, and new vulnerabilities are discovered almost daily. It's a bit scary, but keeping up with these changes is essential for maintaining a secure environment. Think of it as a key survival skill in our digital age. By staying informed and using tools like strong passwords and password managers, we can protect our information and navigate the digital world with confidence.

Jimmy immigrated from Indonesia to the U.S. with the hopes of bringing pride to his people. Jimmy studied computer science at Marlborough College, and later pursued a fellowship at All In Energy in 2019. He expresses his deep gratitude towards AIE for opportunities and hopes to sharpen his future skills.