Viewing profile — lowe

heh, I included this line because it's true, but that whole section is about why "use coffee because you like python" is the wrong tldr.

nope! confusingly unrelated.

Sorry for the confusion, this was a forum release. Linux build is here: https://forums.dropbox.com/topic.php?id=66910

here's the full context from dropbox forums: https://forums.dropbox.com/topic.php?id=66910

$^$^$^_ and $^$^$^z are both recognized by zxcvbn as bruteforce regions. it reports the entropy as: n log (c) for a length-n password with symbol space c. the huge difference in cr…

zxcvbn's current analysis for 'correcthorsebatterystaple' vs 'correct horse battery staple' looks about right to me, it's counting each space as an extra bruteforce character. hors…

zxcvbn gives high entropy for emails because it isn't matching against them currently. if there's good evidence that people commonly use emails as passwords (and crackers try email…

That's a great idea. More generally, whatever the approach, I agree zxcvbn would be better with a more conservative rating for non-pattern-matched regions.

This drives me insane. It especially bites everyone using a a manager to generate long random passwords. Password fields that are too short cause a similar problem, where you ask "…

It certainly needs more tweaking. FJ, FJFJ, etc isn't in any of the 10k passwords people commonly use, isn't a sequence, isn't a single repeated character, etc, so zxcvbn recognize…

sounds about right. screenshot of BofA's policy here: http://dl.dropbox.com/u/209/bofa_password_constraints.png the forbidden list is: $ ^ ! [ ]

I'm with you. These two are great too: * pole * biosphere