Live data from Hacker News

I included emoji in my password and now I can't log in to my Account on Yosemite

apple.stackexchange.com

81–90 of 150 posts

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#81
post #64
post #26

Such problems are the reason why I never use anything but ASCII letters as passwords (if the system doesn't enforce arbitrary password policies). I'd rather have a longer ASCII-only password than a shorter one I might not be able to input. There's also the issue that often you are not sure what keyboard layout is current enabled and even such unsuspicious characters like ! or # are on completely different locations o…

> ... have you ever had a look at a French keyboard layout? My favorite one is Russian. I understand Cyrillic characters, but their positions are just completely messed up.

What don't you like about it? I'm slowly getting used to the layout as I learn Russian, and the position per letter frequency feels about right for me. That is, most of the time my slowness in typing in Russian is a result of poor vocabulary and having to think about word agreements rather than feeling like letters are out of the way.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#82

Earlier quoted context omitted.

"May" as in "most certainly did", at least when you are lazy like me and use a GUI-centered distro. I ended up plugging the harddrive into another computer and fixing it from there. I never got that shit from slackware...

Slackware don't do shit. In fact, Slackware don't do anything unless it's told, which is not as bad a thing as it may seem.

Took me some years to work it out but I have begun to appreciate Slackware since installing 14.1 summer before last.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#83
post #71

Earlier quoted context omitted.

A quote from the Slackware README_CTYPT.txt "NOTE: if you use a non-US keyboard and need to enter a passphrase during boot, this may be problematic if the keyboard mapping is US while Slackware runs from the initrd filesystem. In this case, add support for your keyboard to the initrd image using this additional parameter to the 'mkinitrd' command above: "-l ". The string is the same as the one you select in the insta…

I have to input a different keyboard when logging in through sddm vs. when using sudo, due to sddm refusing to accept non-US locales.

I have that one when running init 4 but the encryption pass phrase is before that stage of the boot up the way my laptop is set up. I'll remember that though...

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#84
post #4

A client once had an issue where his account got compromised and everything pointed to having his actual login details leaked. His password was something like his username plus an assortment of random characters. It turned out that the system his account was on basically ignored everything after the 8th character, so that you were able to login with the username as the password. Also, during the early days of inline…

There's a lot of crap out there: http://www.troyhunt.com/2011/01/whos-who-of-bad-password-pra... It's common when there's a web interface bridging directly into a legacy mainframe system built in the 70s. That's how you see things like "your password can't contain Q or Z" (it was originally a rotary phone-dial interface and ancient US phones didn't have Q or Z[0] — to say nothing of special characters, this means the…

If you call in to your fidelity account, they ask you to type in your username and password with the keypad to authenticate yourself. I haven't given it much thought, so perhaps I'm wrong, but this struck me as probably based on some dicey insecure backend implementation.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#85
post #78

And this is a perfect reminder that you should never try some crazy things on your only administrator account on your production machine. Had he test his point on a dummy account : delete account = problem solved

Well, really, it should just work or OSX should prevent this from happening in the first place.

Emoji are common among non-technical users---exactly the market that Apple supposedly caters to---and why would anyone expect a non-technical user to know that using emoji in a password would be considered "crazy", without knowing the extensive legacy of pre-Unicode systems, the location of many emoji outside the Basic Multilingual Plane, their relatively recent inclusion in Unicode 8.0, etc etc.?

It is a mistake to blame the user for something like this.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#87
post #71

Earlier quoted context omitted.

A quote from the Slackware README_CTYPT.txt "NOTE: if you use a non-US keyboard and need to enter a passphrase during boot, this may be problematic if the keyboard mapping is US while Slackware runs from the initrd filesystem. In this case, add support for your keyboard to the initrd image using this additional parameter to the 'mkinitrd' command above: "-l ". The string is the same as the one you select in the insta…

I have to input a different keyboard when logging in through sddm vs. when using sudo, due to sddm refusing to accept non-US locales.

So I looked up SDDM, because I'd never heard of it, and when I found it what it was (and saw its bug list) I laughed and laughed.

https://www.jwz.org/doc/cadt.html

Nothing changes.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#88
post #56
post #40

Earlier quoted context omitted.

Interesting. I would love to hear more details, like how much traffic you are bringing in total from these mini-apps and how much income from Adsense.

I have two books in my queue actually, and this is one of them. There are parts of my content-property model I'm not ready to share, but most of it has been structured into a cohesive framework of how I: 1. find niches 2. automate site creation 3. optimize w/ gpt (google publisher tag) I'm sorry to say I won't be releasing that first... The first is due within the next 12-14 days, after which it should take me 1-2 mo…

>5-figures per day

Where among them is the decimal point?

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#89
post #85
post #78

And this is a perfect reminder that you should never try some crazy things on your only administrator account on your production machine. Had he test his point on a dummy account : delete account = problem solved

Well, really, it should just work or OSX should prevent this from happening in the first place. Emoji are common among non-technical users---exactly the market that Apple supposedly caters to---and why would anyone expect a non-technical user to know that using emoji in a password would be considered "crazy", without knowing the extensive legacy of pre-Unicode systems, the location of many emoji outside the Basic Mul…

Not trying to excuse OSX's behaviour, but non-technical users are the ones who use passwords like: abcdef, 123456, password123, etc.

In fact, using such characters (emojis, other unicode characters, etc.) in passwords should be considered a secure practice.

Re: I included emoji in my password and now I can't log in to my Account on Yosemite

#90

Earlier quoted context omitted.

There's a lot of crap out there: http://www.troyhunt.com/2011/01/whos-who-of-bad-password-pra... It's common when there's a web interface bridging directly into a legacy mainframe system built in the 70s. That's how you see things like "your password can't contain Q or Z" (it was originally a rotary phone-dial interface and ancient US phones didn't have Q or Z[0] — to say nothing of special characters, this means the…

If you call in to your fidelity account, they ask you to type in your username and password with the keypad to authenticate yourself. I haven't given it much thought, so perhaps I'm wrong, but this struck me as probably based on some dicey insecure backend implementation.

More likely it is to prevent your having to say your password to the person on the phone. This protects you from a malicious bank employee.
Post reply on HN