Live data from Hacker News

The Password Game

neal.fun

351–360 of 540 posts

Re: The Password Game

#351
That's a shame, I reached an impossible situation. The best chess move is Re5+ which includes the letters Re which is the element Rhenium with atomic number 75. However since the roman numerals need to multiply to 35 then the only valid solution is having VII and V (XXXV for 35 is not recognized for some reason), and V is Vanadium with atomic number 23 and I is Iodine with 53. That already leaves me with 227, above the 200 threshold for one of the rules.

Re: The Password Game

#352

That's a shame, I reached an impossible situation. The best chess move is Re5+ which includes the letters Re which is the element Rhenium with atomic number 75. However since the roman numerals need to multiply to 35 then the only valid solution is having VII and V (XXXV for 35 is not recognized for some reason), and V is Vanadium with atomic number 23 and I is Iodine with 53. That already leaves me with 227, above t…

You should be able to do XXXV and I to get 35, I think it needs two roman numerals to multiply (that worked for me at least)

Re: The Password Game

#353

Earlier quoted context omitted.

Hah! I was wondering about that. Mine dropped me into what looks like a 3D modeled version of a real place, but sandboxed - there's no way to move around. (that iframe embed is: https://www.google.com/maps/embed?pb=!4v1686332716861!6m8!1m... ) It led me down the path of reverse engineering these URLs though, so that's fun.

here is the street view link: https://www.google.de/maps/@25.0897073,51.1817779,3a,75y,268...

That's great! How did you get that?

Re: The Password Game

#357

A warning to future players: I got to rule 16 and was given an egg named paul that I had to keep safe. Then on rule 18 a fire (of emojis) broke out in my password, killing paul and ending the game. Dont be like me, keep Paul safe.

"PAUL WAS OVERFED"

OH NO!!

Re: The Password Game

#358
post #12

I'm stuck at "iatetomatoesyesterday0265Z#521juneVpepsiVIIxngxcaboutAg[moon emojis]italy2020Bf7+" trying to solve the chess notation puzzle. I especially laughed at the rule "must include today's Worldle" and I'm happy with my solution including every emoji for "must include the current phase of the moon as an emoji." (HackerNews doesn't seem to display emoji. My solution is to paste every moon phase emoji.) Excited t…

I'm too stuck at the chess move with XXXVJanuarypepsi@3pe4g99tractHechile

Re: The Password Game

#359
post #242
post #161

Earlier quoted context omitted.

I don't think passwords will be replaced. This is more of a demonstration of over complicated password rules, than against passwords itself. Hardware and biometric keys can be stolen, cloned and lost. And trusting third-parties with keys to harddrive encryption is also not really trustworthy.

1. You can have multiple hardware keys or devices bound to an account as a backup of for ease of use. 2. Passkeys allow you to pick a backup solution of your choosing. Could be your own nextcloud server in the corner. This is no different than giving someone a choice of cloud-synced password manager Both solutions avoid phishing, password re-use, keylogging, or people picking weak passwords. There is no excuse for an…

> 1. You can have multiple hardware keys or devices bound to an account as a backup of for ease of use.

How does that help if someone steals your hardware key, login in with it and then puts it back. You don't even know that it was stolen and your account was messed with. With a good password you know if you tell someone. Granted people could film you typing your password, but stealing your hardware key is much easier.

> 2. Passkeys allow you to pick a backup solution of your choosing. Could be your own nextcloud server in the corner. This is no different than giving someone a choice of cloud-synced password manager

This isn't about backup, but trust. Do I trust a third-party to manage the keys to my kingdom? No. And even if, the third-party is a much easier target for 3 letter agencies, governments or other rich/influential bad actors. Also I haven't seen a solution where passkey can be used to decrypt my LUKS partition.

> There is no excuse for anyone even supporting passwords at this point. Sysadmins have not commonly used passwords for ssh in 20 years, favoring private keys on either hardware or encrypted disks. Keys better than passwords-over-the-wire in every way.

The encrypted disks are hopefully protected with a password, and not magically unencrypted, just by booting it with the right TPM configuration. The hardware hopefully requires a pin or password in order to unlock the SSH key, and the SSH key on disk is hopefully encrypted with a password as well.

Post reply on HN