Czech your passwords.
-
In all seriousness this is a genuine problem (due to UTF-8 normalization-- composition vs decomposition) if you switch between MacOS (always use ASCII latin letter codepoint + diacritic codepoint, no matter what; i.e. "o" + "/", "r" + carron, etc.) and anything else (always prefere one single codepoint if the accented letter exists, e.g., in the Latin-1 block: "ø", Latin Extended-A block: "ř")
... -
For sure, leaving out the salt is highly irresponsible.
But I don’t trust sites to be salting, so I pick passwords that are strong enough that even if a site stored it using a single iteration of MD5 with no salting it would not be broken.
-
P pelle@veganism.social shared this topic
-
Interestingly the lower case version of that password is found in exactly one leak known to https://haveibeenpwned.com/Passwords
-
"directorate of analysis, make a note on this file: greynerd65 fell for the social hack of leaking opsec details by luring them into a false sense of informality"
-
Follow this one past the typing test... Not that far off from the truth.
-
-
I have the CD with the song that line came from.
-
Czech your passwords.
@jupiter
Have your cat type your passwords. -
The pronunciation point got me wondering whether an American would be able to pronounce this password: zzzccccczczczcczczcc
-
"THEY DID IT AGAIN! WRITE THIS DOWN!"
i'm just being a jerk
i'm good at it
🤭
-
I have the CD with the song that line came from.
Sorry I misremembered. The actual line in that song is:
A æ u i æ å, u i å æ ø -
The pronunciation point got me wondering whether an American would be able to pronounce this password: zzzccccczczczcczczcc
-
I totally agree with that. There was a time where I used machines with both Danish and American keyboard layouts on a daily basis. So I learned to pick passwords consisting of only characters that were located in the same place on both keyboards.
And that was a time when only ASCII was supported, so I had to keep that in mind as well.
The best way to make passwords stronger is to make them longer rather than using more different characters.
I am so annoyed by sites that get this wrong. First they reject my 32 character password because it’s too long. So I try truncating my password to 12, 16, or 20 characters (whatever they permit), and then they reject it because I only have alphanumeric characters. Seriously, the password I started with was stronger than such a short password could ever be. So the weakness of the password I am trying is entirely caused by their low limit on password length and not by the set of characters I had chosen to use.
A user should be allowed to use a password consisting of only two distinct characters as long as it’s long enough and doesn’t have any patterns.
@kasperd @MegaMichelle @CrackMeIfYouCan @kajer @jupiter at one point Linux boot-time FS decrypt wouldn't use the O/S locale, but en-US, so here in en-GB things like @ in pass phrases were... Interesting...
-
@kasperd @MegaMichelle @CrackMeIfYouCan @kajer @jupiter at one point Linux boot-time FS decrypt wouldn't use the O/S locale, but en-US, so here in en-GB things like @ in pass phrases were... Interesting...
Imagine how the German and the French would deal with that.
-
Imagine how the German and the French would deal with that.
@kasperd @MegaMichelle @CrackMeIfYouCan @kajer @jupiter keep two different keyboards on your desk?
-
Czech your passwords.
-
Czech your passwords.
@jupiter And doucle-Czech your password checker?
-
Czech your passwords.
-
F folfdk@helvede.net shared this topic
-
Czech your passwords.
what a great idea!
-
"Special characters"
@MegaMichelle @jupiter mind you, even a single special character like the romanian "ă" especially raises entropy by a lot, firstly because it's an unique character only used in romanian and secondly because it is technically outside of the standard Latin alphabet
anyway, we all love spêciăl châracțerș.
