Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The password “ji32k7au4a83” has been seen over a hundred times

twitter.com

Post reply on HN
Print view View original

201–210 of 296 posts

Re: The password “ji32k7au4a83” has been seen over a hundred times

#201

Post by rustyfe »

kakarot wrote: post #145
Dylan16807 wrote: post #127

Earlier quoted context omitted.

If giving out the length hurts anything, there's enough going wrong that you should probably assume it's already compromised. Unless there's something fundamentally wrong with the password, a public length of n is almost as secure as a secret length of n, and significantly more secure than a secret length of n-1 Never get into the specifics of a password, but explaining the basic structure should be a tiny impact and…

I'm willing to believe that if you could help me understand a bit more why that is so.

We'll take 60 possible characters (alphanumeric with caps and a few special characters). The summation 1...N of 60^x is (60/59) (60^N - 1). Known length is 60^N. If we assume N is big enough that the minus one isn't important, you can see going from known to unknown only increases the guesses by a factor of 60/59!

Re: The password “ji32k7au4a83” has been seen over a hundred times

#202

Post by dang »

entity345 wrote: post #157
tjpnz wrote: post #70

Earlier quoted context omitted.

It does have some resemblance to katakana. The first character at least looks very similar to メ.

Yes, katakana is inspired by Chinese characters... roll eyes. For example, the Katakana character you mention is directly taken from Chinese.

Would you please stop posting flamebait to Hacker News? We can accounts that won't.

Re: The password “ji32k7au4a83” has been seen over a hundred times

#203

Post by entity345 »

wccrawford wrote: post #188
entity345 wrote: post #157

Earlier quoted context omitted.

Yes, katakana is inspired by Chinese characters... roll eyes. For example, the Katakana character you mention is directly taken from Chinese.

Your comment would have been better received without the insult.

You probably don't even realise that comments like the one I replied to are somewhat insulting...

Re: The password “ji32k7au4a83” has been seen over a hundred times

#204

Post by entity345 »

dang wrote: post #202
entity345 wrote: post #157

Earlier quoted context omitted.

Yes, katakana is inspired by Chinese characters... roll eyes. For example, the Katakana character you mention is directly taken from Chinese.

Would you please stop posting flamebait to Hacker News? We can accounts that won't.

I am trying to post factual comments.

Do not accept political threads, or make clear what political line is 'correct' if you do not want debate.

Re: The password “ji32k7au4a83” has been seen over a hundred times

#206

Post by bspammer »

ttsda wrote: post #189
mehrdadn wrote: post #186

Earlier quoted context omitted.

> it's well known that malicious sites behave differently on certain conditions, one is having the developer tools opened I had always wondered if they do, and I've known it's possible, but this is the first time I've heard any accounts of it. Would you have more info on this?

As someone who has worked on scraping sites that really didn't want to be scraped, there is all kinds of interference with dev tools in the wild. There are many ways to detect it's open (eg. https://github.com/sindresorhus/devtools-detect ) and it's also possible to mess with it without knowing it's open. A method that's wildly used is firing the debugger break command many times a second, along with other stuff that…

That script doesn't seem to be able to detect the chrome devtools when they're undocked, so that seems pretty easy to circumvent (who has them docked anyway?). The debugger break thing should be solvable with https://developers.google.com/web/tools/chrome-devtools/java...

Re: The password “ji32k7au4a83” has been seen over a hundred times

#207

Post by z29LiTp5qUC30n »

dTal wrote: post #167
Dylan16807 wrote: post #127

Earlier quoted context omitted.

If giving out the length hurts anything, there's enough going wrong that you should probably assume it's already compromised. Unless there's something fundamentally wrong with the password, a public length of n is almost as secure as a secret length of n, and significantly more secure than a secret length of n-1 Never get into the specifics of a password, but explaining the basic structure should be a tiny impact and…

While you're correct mathematically, I still think it's a good habit to give zero information about your password. If you attempt to estimate the information leakage with every "hint", sooner or later you'll slip up.

My view is your secrets should be secure even if the attacker knows everything about how they are generated and used. For example: My password is 8192 characters long, leveraging only the ASCII character set (except \n\r\t\0) It is changed every 28days at 11:05am It is only used on exactly 1 website and the username on that website is also only used on that website and randomly generated as well.

Good luck (Tell me how and where I can make this stronger)

Re: The password “ji32k7au4a83” has been seen over a hundred times

#208

Post by rjf72 »

fxfan wrote: post #114
osrec wrote: post #17

Earlier quoted context omitted.

I'm only guessing, but this could provide a clue: https://www.google.com/amp/s/www.urbandictionary.com/define....

What the actual hell. Who even remembers the key? And more importantly why? Why would you install XP once a week to remember it? I'm shocked by this subthread!

'Back in the day' regular formats were a pretty good way of maintaining system performance. They still are really but computers being an order of magnitude overpowered for all the tasks 90% of users do makes it less relevant. You'd be surprised how easy it is to memorize long series of digits when you enter them a few times. For instance FCKGW. Who was the president in 2001? You'll now literally never forget those 5 letters.

Re: The password “ji32k7au4a83” has been seen over a hundred times

#210

Post by zamadatix »

shubhamjain wrote: post #8

Related story: For some weird reason, I memorized the serial key for a very popular software (I must be fifteen then). Even today, I can recite the 25-letter key without a hitch. And I have used its first ten letters as a password to one of my accounts. Guess what? The password has been used 4000+ times before [1]. It's hard to digest the fact that there are at least a thousand people in the world who did the same th…

(key redacted as I realized they are still selling SC4 Deluxe on Steam. It was your standard 5 groups of 4 alphanumeric key)

When I was a kid I didn't understand why Sim City 4 Deluxe played after install but didn't play when I stuck disk 2 back in and clicked the game. It was my favorite game for a number of years and it wasn't until at least 2 or 3 years in I realized it wanted me to stick disk 1 in for the copyright protection and that disk 2 just worked during install for convenience reasons. I had been uninstalling the game every night before I went to bed (preserving saves!) and reinstalling it every day after school. One day I couldn't find the case with the key (probably got thrown away) and I thought I was going to have to buy it again but when I went to the computer I was able to get it first guess.

Been 15 years now. I suppose I'm never going to forget that key.

Post reply on HN