Password Chart
passwordchart.com
Password Chart
1–10 of 47 posts
Re: Password Chart
#2Uses part of an MD5 hash of a typed-in phrase as a seed for a random number generator.
Interesting, but the final result generates a password that is extremely difficult to memorize.
For most people, simply using the initial typed-in phrase as their password would be a significant improvement on security and it would be easier to remember.
Re: Password Chart
#3Why not just use the phrase+password as a password?
Re: Password Chart
#4Why not just use the phrase+password as a password?
[deleted]
Re: Password Chart
#5I glanced over the JS source and didn't find any evidence that the site is malware. Unfortunately, that's about the best thing I have to say about the security of using this method.
Re: Password Chart
#6Wow! I've actually been trying to come up with a secure, but easy-for-me-to-remember password scheme.
What I wanted to build was a password generator which takes a username and domain as inputs and spits out an pseudo-random passsword.
Something like: bgraves & ycombinator.com & salt = ybcgormabviensator#salt
The problem for me is that I use very hard to guess passwords, generated by my password database program (KeePass). Now I have no idea what those PW's are and rely solely on KeePass to keep track, which isn't available on my workplace PC (and, no, syncing my password DB between environments is not permitted.)
This site maybe what I was looking for, and it even looks like it's in JS to prevent most MitM attacks!
Thanks HN!!
Re: Password Chart
#7Wow! I've actually been trying to come up with a secure, but easy-for-me-to-remember password scheme. What I wanted to build was a password generator which takes a username and domain as inputs and spits out an pseudo-random passsword. Something like: bgraves & ycombinator.com & salt = ybcgormabviensator#salt The problem for me is that I use very hard to guess passwords, generated by my password database program (Kee…
> even looks like it's in JS to prevent most MitM attacks!
The JS is delivered over cleartext HTTP. A MITM attack can substitute malicious JS code that will deliver your password to a third-party server.
Re: Password Chart
#8I glanced over the JS source and didn't find any evidence that the site is malware. Unfortunately, that's about the best thing I have to say about the security of using this method.
What are some negatives to using a security method like this?
In my mind, it's just a way to come up with "hard to guess, but easy to remember" passwords.
Re: Password Chart
#9Wow! I've actually been trying to come up with a secure, but easy-for-me-to-remember password scheme. What I wanted to build was a password generator which takes a username and domain as inputs and spits out an pseudo-random passsword. Something like: bgraves & ycombinator.com & salt = ybcgormabviensator#salt The problem for me is that I use very hard to guess passwords, generated by my password database program (Kee…
> even looks like it's in JS to prevent most MitM attacks! The JS is delivered over cleartext HTTP. A MITM attack can substitute malicious JS code that will deliver your password to a third-party server.
Not if you just save the JS file to your local machine, right? There's no HTTP involved in that case (which is precisely how I intended to use it).
Re: Password Chart
#10I think this is in an incredibly bad way to create passwords, at any given moment they could swap out the js so that it phones home and then boom your insecure.