81–90 of 296 posts
Some sites are throwaway (example: they force a sign-up). Don't assume all weak passwords used are not conscious decisions. Entropy is too precious to give up to throwaway sites of uncertain backend security.
You can find lots of examples of throwaway passwords with associated accounts (and submit your own) at bugmenot.com
It's just interesting to me, another reminder that physics is just that much more easier than anything else.
Earlier quoted context omitted.
If you're interested in learning Chinese, and want to see the bopomofo/pinyin/literal/parallel translations, please check out Pingtype! I wrote it to help me study. Click Advanced > ㄅㄆㄇㄈ if you want the Zhuyin. https://pingtype.github.io
Was lurking profiles of the Taiwanese crowd on HN. How is it to work as a Software engineer in Kaoshuing?
Let this thread be a reminder for everyone to use a password manager.
I'm willing to bet that a major upcoming security disaster is a compromised password manager that leaks out tens of millions of accounts and passwords in nicely structured XML that's perfect for automated attacks and frauds. Yes, I use a password manager too, but an ancient one that has no Internet connection, no syncing, and no cloud storage. The only "modern" password manager I've been able to find that works compl…
A great thing about password managers is that you can change your passwords more often since you don't have to bother coming up with and remembering new passwords. It can even be somewhat automated with pass-rotate: https://github.com/ddevault/pass-rotate
This is using the zhuyin keyboard which most likely means Taiwanese users since Taiwan is probably the sole user of the zhuyin keyboard. Typing that out on a zhuyin keyboard gets you: ㄨㄛˇㄉㄜ˙ㄇㄧˋㄇㄚˇ In Pinyin that is wo3 de mi4ma3 Or in English "my password"
For the unfamiliar, "ㄨㄛˇㄉㄜ˙ㄇㄧˋㄇㄚˇ" is an example of "bopomofo" script, the phonetic system used to teach kids reading and pronunciation in Taiwan, and adapted to Chinese keyboard input (zhuyin). I learned it in the 1990s studying Mandarin in Taipei. It maps closely to pinyin romanization used in China (i.e., "ㄨㄛˇ" = "wo3" which is the sound in the Mandarin dialect for "我" and potentially other characters with the sam…
Earlier quoted context omitted.
Holy shit! Now that I have changed the password, can you please tell me how did you guess that?
Because bunch of us memorized fckgw rhqq2 yxrkt 8tg6w 2b7q8 for the very same reason back in early 2000s
Let this thread be a reminder for everyone to use a password manager.
I'm willing to bet that a major upcoming security disaster is a compromised password manager that leaks out tens of millions of accounts and passwords in nicely structured XML that's perfect for automated attacks and frauds. Yes, I use a password manager too, but an ancient one that has no Internet connection, no syncing, and no cloud storage. The only "modern" password manager I've been able to find that works compl…
Kind of a secondary master password that's not stored anywhere except my memory and my safe.
Best of both worlds in my opinion.
Related story: For some weird reason, I memorized the serial key for a very popular software (I must be fifteen then). Even today, I can recite the 25-letter key without a hitch. And I have used its first ten letters as a password to one of my accounts. Guess what? The password has been used 4000+ times before [1]. It's hard to digest the fact that there are at least a thousand people in the world who did the same th…
Word of warning, if you use an ad/content blocker like uBlock Origin, and block 3rd-party JS, then HIBP may give up on its k-anonymity mechanism and just sends your password to their server in cleartext. Ensure you specifically permit loading jQuery from cloudflare.com, and check network traffic using a test password first.
Once a friend shared with me one of those services, he got surprised when I raised my concern about compromising his password, he took a second to check the developer tools to see if there was any request including his password, there wasn't, so he called me crazy (it's well known that malicious sites behave differently on certain conditions, one is having the developer tools opened).
Anyway, I suppose that this blind trust is what makes phishing attacks so effective.
Speaking of good passwords, I wrote a passphrase generator once that I still use to this day. You can have a copy of it if you’d like. The README explains all there is to know about it but feel free to ask any questions anyone might have. https://github.com/ctsrc/Pgen
One of the password generation tools -- so long ago I forget which one, but probably 1Password -- generated a password for me, and I loved the scheme it used. I still use a variety of it but now I make them up myself. The rules: 1. Make up a short nonsense word (so it's pronounceable). 2. Pick 3 numbers. 3. Make up another short nonsense word. 4. Concat them with hyphens, capitalising the first letter. So let's go wi…