Show HN: Memorable but hard to crack password generator
1–10 of 12 posts
Re: Show HN: Memorable but hard to crack password generator
#2john --wordlist
Re: Show HN: Memorable but hard to crack password generator
#3Should this not be behind SSL? Looks good though.
Re: Show HN: Memorable but hard to crack password generator
#4Having uncommon words doesn't make a password hard to crack, they're in the dictionary just the same.
Re: Show HN: Memorable but hard to crack password generator
#5Should this not be behind SSL? Looks good though.
Probably should yes!
Re: Show HN: Memorable but hard to crack password generator
#6Having uncommon words doesn't make a password hard to crack, they're in the dictionary just the same.
Of course you're correct and I don't claim that these are uncrackable. Just a way to practice a bit of clojure while the missus had her girlfriends over.
Re: Show HN: Memorable but hard to crack password generator
#7Having uncommon words doesn't make a password hard to crack, they're in the dictionary just the same.
Of course you're correct and I don't claim that these are uncrackable. Just a way to practice a bit of clojure while the missus had her girlfriends over.
The headline is "hard to crack" which seems misleading.
Re: Show HN: Memorable but hard to crack password generator
#8Having uncommon words doesn't make a password hard to crack, they're in the dictionary just the same.
Having long words does make brute-force cracking harder.
Re: Show HN: Memorable but hard to crack password generator
#9Pretty cool! What does the " to one" mean exactly?
Re: Show HN: Memorable but hard to crack password generator
#10As mentioned these passwords aren't hard to crack.
Anything based on a word list is going to be inherently easy to crack, and with a predictable format like word-separator-word, it is even easier.
I realise this is a fun weekend project, and learning new languages is always a good thing, but I think it's a little irresponsible to make any claims that these passwords are secure.
Also as mentioned, if people were to actually use this for password generation it should be behind SSL, although I would discourage anyone from using passwords generated by a remote service.