No post body was provided.
Ask HN: 5-digit alphanumeric or 12-digit integer simpler and more secure?
1–9 of 9 posts
Re: Ask HN: 5-digit alphanumeric or 12-digit integer simpler and more secure?
#25-digit alphanumeric e.g. HEL2N
Re: Ask HN: 5-digit alphanumeric or 12-digit integer simpler and more secure?
#312-digit integer e.g. 907653849272
Re: Ask HN: 5-digit alphanumeric or 12-digit integer simpler and more secure?
#4Compare possible brute force combinations:
(26+10)^5 vs. 10^12
Re: Ask HN: 5-digit alphanumeric or 12-digit integer simpler and more secure?
#5Compare possible brute force combinations: (26+10)^5 vs. 10^12
That would be 10e12 vs 60.466.176. Pretty easy from the security pov.
Also if an alphanumeric string should be entered / remembered by humans make sure to strip I, l, etc.
Re: Ask HN: 5-digit alphanumeric or 12-digit integer simpler and more secure?
#6Even with 5 x 62 case sensitive alphanumeric digits, 12 integers is roughly 1000 times more secure
Re: Ask HN: 5-digit alphanumeric or 12-digit integer simpler and more secure?
#7Compare possible brute force combinations: (26+10)^5 vs. 10^12
For case-sensitive alphanumeric: (26+26+10)^5
Which is still far lower than 12 digits.
Re: Ask HN: 5-digit alphanumeric or 12-digit integer simpler and more secure?
#8This is for some password authentication?
I never understand why people restric password length. Why not 12-char alphanumeric? Or 32-char alphanumeric? Most people will use 10-char passwords (or shorter), but those concerned with security could use better.
BTW - I'v got idea how to ensure people will use unique secure passwords on your site. It's a little harsh, but still.
For each new user in registration form calculate 4-letters hash (from user number, timestamp, whatever), and require user to include this hash in his password (and that the password is at least X characters long). User that has favorite password "swordfish" will just use "swordfishX13h" probably, but it's still better than "swordfish".
Re: Ask HN: 5-digit alphanumeric or 12-digit integer simpler and more secure?
#9This is for some password authentication? I never understand why people restric password length. Why not 12-char alphanumeric? Or 32-char alphanumeric? Most people will use 10-char passwords (or shorter), but those concerned with security could use better. BTW - I'v got idea how to ensure people will use unique secure passwords on your site. It's a little harsh, but still. For each new user in registration form calcu…
I think the question is not password related as the key may be used as a UID for a "semi restricted" link.