The password “ji32k7au4a83” has been seen over a hundred times

Post by jeena » Mon, Mar 04, 2019, 7:00 PM UTC

JdeBP wrote: post #229

jeena wrote: post #137

I once used a password which our IT department gave me and it was !'a;@,oq and at least for me it looked random enough. I had it as a root password on a server and I enabled password login for about 2 minutes because I wanted to resize some virtual hard drive or something and couldn't be logged in as a normal user and then switching with su to root because then the normal user would have open files on the file system…

columns, not rows.

Post by jzymbaluk » Mon, Mar 04, 2019, 7:57 PM UTC

cronix wrote: post #238

I like how they took the opportunity of the popularity of the post to promote their political viewpoints on trans people (post immediately under first post by same author). It just makes the first post look like clickbait. Why do people feel the need to introduce politics into something that isn't political once they get an audience? Boo.

Post by kakarot » Mon, Mar 04, 2019, 8:01 PM UTC

infogulch wrote: post #149

kakarot wrote: post #145

Earlier quoted context omitted.

I'm willing to believe that if you could help me understand a bit more why that is so.

Think of it this way: assume someone is trying to brute force your password. For simplicity let's say they know nothing about it, except that its characters are randomly drawn from a 50 character pool. As they guess passwords starting with 1 character, each added character takes 50x longer than all previous guesses put together to guess all possible passwords of that length. Put another way, if they knew the length b…

Post by cronix » Mon, Mar 04, 2019, 8:34 PM UTC

jzymbaluk wrote: post #253

cronix wrote: post #238

I like how they took the opportunity of the popularity of the post to promote their political viewpoints on trans people (post immediately under first post by same author). It just makes the first post look like clickbait. Why do people feel the need to introduce politics into something that isn't political once they get an audience? Boo.

Plugging something when your post blows up on Twitter is a time honored tradition, usually someone will plug their sound cloud or Instagram in an attempt to capitalize on the attention. This author chose to direct attention towards an underprivileged group, and you're angry about it? Get over yourself.

Post by Dylan16807 » Mon, Mar 04, 2019, 9:57 PM UTC

kakarot wrote: post #255

infogulch wrote: post #149

Earlier quoted context omitted.

Think of it this way: assume someone is trying to brute force your password. For simplicity let's say they know nothing about it, except that its characters are randomly drawn from a 50 character pool. As they guess passwords starting with 1 character, each added character takes 50x longer than all previous guesses put together to guess all possible passwords of that length. Put another way, if they knew the length b…

Gotcha. I guess I was unclear about what "almost as secure" meant in this context. So whether providing your length is a tangible security leak or not is essentially a function of the size of your character pool, because if your password is short enough for n-1 to contain a significant percentage of possible combinations then it's probably already short enough to brute force anyway.