That follow-up tweet freaks me out. What does that have to do with anything, really. I think it's rather unprofessional and would prefer people not make self-congratulatory statements about their personal beliefs.
The password “ji32k7au4a83” has been seen over a hundred times
161–170 of 296 posts
Re: The password “ji32k7au4a83” has been seen over a hundred times
#162I just keep the RandomKeyGen [0] site on the top of my bookmarks, and whenever I need to set a password for a newly spun up server, or SQL DBA admin password etc., I just pick a random one from there. Advantage over a password manager? - sometimes I have to document what the password is in offline technical notes or a password vault for the customer, and doing it this way lets me kill two birds with one stone. [0] -…
Is there a similar site that makes memorable passwords but long? (basically I get entropy and can remember if needed). I use keepasaxc which doesn't have this.
I really enjoy using https://makemeapassword.ligos.net for xkcd-style passwords because the sentences you get are a lot easier to write as they sort of follow the natural syntax of English, yet are still completely nonsense. My single gripe with 1Passwords generator is that it just picks words at random, losing the cadence and flow of language.
Re: The password “ji32k7au4a83” has been seen over a hundred times
#163Let this thread be a reminder for everyone to use a password manager.
I'm willing to bet that a major upcoming security disaster is a compromised password manager that leaks out tens of millions of accounts and passwords in nicely structured XML that's perfect for automated attacks and frauds. Yes, I use a password manager too, but an ancient one that has no Internet connection, no syncing, and no cloud storage. The only "modern" password manager I've been able to find that works compl…
Keepass is amazing. I use Keepass2Android to keep a local file in my cellphone, and occasionally back up the encrypted file to my Google Drive.
Re: The password “ji32k7au4a83” has been seen over a hundred times
#164That follow-up tweet freaks me out. What does that have to do with anything, really. I think it's rather unprofessional and would prefer people not make self-congratulatory statements about their personal beliefs.
Most of twitter seems to be self-congratulatory posts about users' beliefs
Re: The password “ji32k7au4a83” has been seen over a hundred times
#165Earlier quoted context omitted.
Word of warning, if you use an ad/content blocker like uBlock Origin, and block 3rd-party JS, then HIBP may give up on its k-anonymity mechanism and just sends your password to their server in cleartext. Ensure you specifically permit loading jQuery from cloudflare.com, and check network traffic using a test password first.
It's not cleartext if you're loading over HTTPS which is enforced on this site.
It's cleartext from the perspective of HIBP's server.
Re: The password “ji32k7au4a83” has been seen over a hundred times
#166Related story: For some weird reason, I memorized the serial key for a very popular software (I must be fifteen then). Even today, I can recite the 25-letter key without a hitch. And I have used its first ten letters as a password to one of my accounts. Guess what? The password has been used 4000+ times before [1]. It's hard to digest the fact that there are at least a thousand people in the world who did the same th…
Being the "techy" kid in a 7 person family meant I was responsible for setting up any new devices on our wifi many many years ago. From the number of phones/consoles/laptops set up on the same WEP key, I have the 26 digit random hex string permanently ingrained in my memory. While I don't use it as a password any more, before password managers I'm pretty sure I had one of if not _the_ most secure banking password at the time.
Re: The password “ji32k7au4a83” has been seen over a hundred times
#167Earlier quoted context omitted.
Even if you've provided information which narrows your password down to ~5,000 possible values, you've effectively handed out your password to one of 5,000 internet strangers whom you will never meet in real life. Then consider that this is Hacker News, and how many of those 5,000 have both the skills and motivation to exploit the information you've provided. Never give out "hints" about your password. Not its conten…
If giving out the length hurts anything, there's enough going wrong that you should probably assume it's already compromised. Unless there's something fundamentally wrong with the password, a public length of n is almost as secure as a secret length of n, and significantly more secure than a secret length of n-1 Never get into the specifics of a password, but explaining the basic structure should be a tiny impact and…
While you're correct mathematically, I still think it's a good habit to give zero information about your password. If you attempt to estimate the information leakage with every "hint", sooner or later you'll slip up.
Re: The password “ji32k7au4a83” has been seen over a hundred times
#168Some sites are throwaway (example: they force a sign-up). Don't assume all weak passwords used are not conscious decisions. Entropy is too precious to give up to throwaway sites of uncertain backend security.
What do mean by giving up entropy? Password reuse? You can use a password manager to generate a secure pass for every site, there's no excuse for weak passwords. Here's a few I made with `pwgen`, get it while it's hot: aiPh9toh_ti{XeS(a=a9ohCheeV`o8pu8woh3Epu ahth6AiT6xahaiw:ie1li`xeeF0ohf!ikeih4Joh zah6cusohNei6feithain4aeH5uul5coh/nap0ea uet7ed"ohhooquoosh3ooh8ZeeY+iepeg0eewena UuNg'aes:i!Quohp0eiGh1ibieghe&o9eiSh7…
a shitty site you only plan to use once and you create a throwaway account for is a great excuse for a bad password.
Re: The password “ji32k7au4a83” has been seen over a hundred times
#169Related story: For some weird reason, I memorized the serial key for a very popular software (I must be fifteen then). Even today, I can recite the 25-letter key without a hitch. And I have used its first ten letters as a password to one of my accounts. Guess what? The password has been used 4000+ times before [1]. It's hard to digest the fact that there are at least a thousand people in the world who did the same th…
i think you are talking about the most used windows xp product key "QW4HD DQCRG HM64M 6GJRK 8K83T"
Re: The password “ji32k7au4a83” has been seen over a hundred times
#170this looks like a good way to generate entropy https://www.passwordcard.org/en
combine this with a phrase.