Live data from Hacker News

I included emoji in my password and now I can't log in to my Account on Yosemite

apple.stackexchange.com

21–30 of 150 posts

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#21
post #12

I have had something similar bite me, although mine was easily fixed. I used swedish (åäö) characters for my disk encryption password. This worked fine, until I did a dist-upgrade and had my boot keyboard reset to US QWERTY (using a custom swedish version of capewell-dvorak). The solution for me was to stick on LTS distros.

I'm pretty sure the standard US layout offers more than enough symbols to write an excellent password. I tend to prefer extremely long passwords/phrases over things that require stupid characters (had trouble with WiFi keys using the French "é" back in 2008, all my passwords are ASCII since)

Every language that is not American English is "stupid"?

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#22
post #12

Earlier quoted context omitted.

I'm pretty sure the standard US layout offers more than enough symbols to write an excellent password. I tend to prefer extremely long passwords/phrases over things that require stupid characters (had trouble with WiFi keys using the French "é" back in 2008, all my passwords are ASCII since)

Of course, characters that I use in my everyday language aren't "stupid" to me .

Even my name contains that "stupid" character :)

Although I have to agree with him I wouldn't use it in a Wifi password either.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#23

Earlier quoted context omitted.

A quote from the Slackware README_CTYPT.txt "NOTE: if you use a non-US keyboard and need to enter a passphrase during boot, this may be problematic if the keyboard mapping is US while Slackware runs from the initrd filesystem. In this case, add support for your keyboard to the initrd image using this additional parameter to the 'mkinitrd' command above: "-l ". The string is the same as the one you select in the insta…

"May" as in "most certainly did", at least when you are lazy like me and use a GUI-centered distro. I ended up plugging the harddrive into another computer and fixing it from there. I never got that shit from slackware...

Slackware don't do shit.

In fact, Slackware don't do anything unless it's told, which is not as bad a thing as it may seem.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#24
post #11
post #4

A client once had an issue where his account got compromised and everything pointed to having his actual login details leaked. His password was something like his username plus an assortment of random characters. It turned out that the system his account was on basically ignored everything after the 8th character, so that you were able to login with the username as the password. Also, during the early days of inline…

That's how Schwab.com implements passwords. 8 characters max. For life savings brokerage accounts.

If you also can choose your account name, use it as sort-of additional password space.

I have accounts with several instances where I could give you my password without running much risk of you logging in; even if their phone support would give out my account name, chances are they or you would misspell the line noise that it looks like.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#25
post #12

I have had something similar bite me, although mine was easily fixed. I used swedish (åäö) characters for my disk encryption password. This worked fine, until I did a dist-upgrade and had my boot keyboard reset to US QWERTY (using a custom swedish version of capewell-dvorak). The solution for me was to stick on LTS distros.

I'm pretty sure the standard US layout offers more than enough symbols to write an excellent password. I tend to prefer extremely long passwords/phrases over things that require stupid characters (had trouble with WiFi keys using the French "é" back in 2008, all my passwords are ASCII since)

I'm baffled that the standard US keyboard layout doesn't even have the ° character, something I use all the time.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#26
Such problems are the reason why I never use anything but ASCII letters as passwords (if the system doesn't enforce arbitrary password policies). I'd rather have a longer ASCII-only password than a shorter one I might not be able to input.

There's also the issue that often you are not sure what keyboard layout is current enabled and even such unsuspicious characters like ! or # are on completely different locations on different keyboard layouts (then there's the z-y swap on German derived keyboards and have you ever had a look at a French keyboard layout?).

You can never be sure if a system locks you out after failed attempts, so I want to be sure that there are as few error sources as possible.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#27
post #4

A client once had an issue where his account got compromised and everything pointed to having his actual login details leaked. His password was something like his username plus an assortment of random characters. It turned out that the system his account was on basically ignored everything after the 8th character, so that you were able to login with the username as the password. Also, during the early days of inline…

There's a lot of crap out there: http://www.troyhunt.com/2011/01/whos-who-of-bad-password-pra...

It's common when there's a web interface bridging directly into a legacy mainframe system built in the 70s.

That's how you see things like "your password can't contain Q or Z" (it was originally a rotary phone-dial interface and ancient US phones didn't have Q or Z[0] — to say nothing of special characters, this means the system may also map letters (case-insensitively) to numbers grouped by 3… think your password is "fido"? it's actually encoded as 3436)

> Also, during the early days of inline password generators, there were cases where the suggested password was incompatible with the associated system.

That still happens to this day. There are still a ton of password forms out there which only accept very short alphanumeric-only passwords.

[0] https://upload.wikimedia.org/wikipedia/commons/7/7b/Rotarydi...

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#28
Reminds me of a time in France when someone at a customer site complained they were locked out of their laptop - his Win NT4 laptop had a QWERTY keyboard but he put his password in french using the keyboard switcher in the OS. Back then Windows didn't allow you to change keyboard type at the login screen - it kept what you were using when you logged off...

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#29
Hmm. Not really related, but now that it seems to be fixed - I discovered that using an equals sign in your name was enough to be "locked out" of Airbnb - it wrecked the cookie & every page would return 403. No bug bounty though haha. Guess it wasn't enough of an "attack vector" to try and convince someone to change their name.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#30
Many Linux installers suffered for years the situation that you would enter you password in the setup process with a different keymap than the one you got once the system then loaded, e.g. y-z were mismatched cause I was using QWERTZ instead of QWERTY. I think I saw something similar lately with on of the OSX'es.
Post reply on HN