11–20 of 57 posts
password password password password
I can't imagine doing this for the hundreds of passwords in my list, especially when I change some of them regularly. It could be useful for a master password, though - such as the one that secures my password list. Isn't just remembering a line from a song a little easier? Then you get a password recovery mechanism too, as long as you remember the song, or at least the artist!
[0] http://www.reddit.com/r/Bitcoin/comments/1ptuf3/brain_wallet...
Interesting rewrite of the actual title :P
We're at the point where we're more worried about NSA then a random attacker, as we should be.
I've tested the passphrase: password password password password and most of the online entropy checkers[1] says it's really safe to use such .. is this true? 1. http://rumkin.com/tools/password/passchk.php
Well assuming random guessing with 95% vocabulary coverage its about 50,000 words. A passphrase checker that doesn't start from there but rather works from the ascii tokens is likely not very helpful for checking the strength of a passphrase.
> ... should be 8 characters or longer, which forces you to use multiple words or extra symbols. > ... should have upper case, lower case, symbols, and numbers; or at least three of those four groups. > ... should not be a common word and should not be a common phrase. > ... should not contain a date, a name, or other things that can be associated with you. > ... should be created randomly or semi-randomly. > ... should not be a suggestion when you type in the first few characters into Google.
As for your cited tester, you seem to have ignored every single piece of advice on the page and it seems it doesn't test for it in an automated way. I'd say, in this case, the problem is a bug in the tester rather than the truth of that being "safe".
If you had followed the guidelines, yes, it'd likely be reasonably safe.
https://raw.githubusercontent.com/dbasch/clj-brainwallet/mas...
Here's a browser implementation. I wouldn't use it (do you trust your browser's prng? Do you trust my code?) but it's fun to see the passphrases it generates, and how easy it is to create a story to remember them.
http://diegobasch.com/passgen/
Same thing applied to generating bitcoin brainwallets. Once again, don't use this. It was just a fun experiment to see if I could keep money in my brain.
I've tested the passphrase: password password password password and most of the online entropy checkers[1] says it's really safe to use such .. is this true? 1. http://rumkin.com/tools/password/passchk.php
Relevant Dilbert:
"Unfortunately there doesn’t appear to be user-friendly software available to help people generate Diceware passphrases"
This is silly. There are popular applications for every major phone OS that implement Diceware. Does anyone feel that they're untrustworthy?
I've tested the passphrase: password password password password and most of the online entropy checkers[1] says it's really safe to use such .. is this true? 1. http://rumkin.com/tools/password/passchk.php
The entropy checker doesn't know about externalities like how common a word is or how likely it is to appear following some other word or how frequently it's used in passwords specifically. It's just measuring the length of the string, and probably the class from which its characters are drawn (in your case lowercase letters and spaces). Relevant Dilbert: http://dilbert.com/strip/2001-10-25
My thinking was that "Correct Horse Battery Staple" had more entropy than: "go go go go go go go go go go go go go"
.. which, apparently, is not