Czech your passwords.

[benroyce@mastodon.social]

@dryak @jupiter

well way to ruin my stupid joke!

just kidding

it is a serious issue

[isukun@tkz.one]

@jupiter

Ja ja ja ja ja ja ja ja ja ja XD

[kasperd@westergaard.social]

I totally agree with that. There was a time where I used machines with both Danish and American keyboard layouts on a daily basis. So I learned to pick passwords consisting of only characters that were located in the same place on both keyboards.

And that was a time when only ASCII was supported, so I had to keep that in mind as well.

The best way to make passwords stronger is to make them longer rather than using more different characters.

I am so annoyed by sites that get this wrong. First they reject my 32 character password because it’s too long. So I try truncating my password to 12, 16, or 20 characters (whatever they permit), and then they reject it because I only have alphanumeric characters. Seriously, the password I started with was stronger than such a short password could ever be. So the weakness of the password I am trying is entirely caused by their low limit on password length and not by the set of characters I had chosen to use.

A user should be allowed to use a password consisting of only two distinct characters as long as it’s long enough and doesn’t have any patterns.

[modernmaslow@techhub.social]

@jupiter Clearly you rrrrrrr inverting the dunce cap...

[kasperd@westergaard.social]

Surprisingly that password is not found in https://haveibeenpwned.com/Passwords, are you sure there are actually Germans using that?

[w00p@infosec.exchange]

@jupiter the impossible-to-pronounce-for-a-non-Czech password

[cy@chaos.social]

@kasperd @jupiter i like my passwords like my potatoes! heavily salted

[beyoublahaj@mastodon.social]

@jupiter Going for extra Polish is also a valid strategy.

[greynerd65@mastodon.social]

@evdelen @benroyce @jupiter
I’ve done this test before, using the same device, and this programme did NOT recognise me – or rather, my device.
All the details about my device were wrong again: two matches – namely ‘Windows’ (which almost every device has; I would at least have expected the version to be specified) and ‘x86’ (which is also standard, but the RAM was listed incorrectly too).
So it seems my settings are correct.

[benroyce@mastodon.social]

@greynerd65 @evdelen @jupiter

"directorate of analysis, make a note on this file: greynerd65 fell for the social hack of leaking opsec details by luring them into a false sense of informality"

[kasperd@westergaard.social]

Interestingly the lower case version of that password is found in exactly one leak known to https://haveibeenpwned.com/Passwords

[kasperd@westergaard.social]

The pronunciation point got me wondering whether an American would be able to pronounce this password: zzzccccczczczcczczcc

[jan@social.janantos.com]

@dryak @benroyce @jupiter few years ago my ETL to analytics cube start suddenly failing because of company enabled registration via mobile app and one user decided to have username as “Princess” yeah I know I wasn’t sanitizing input enough, but tbh no one expected this when the ETL was designed.

[kasperd@westergaard.social]

For sure, leaving out the salt is highly irresponsible.

But I don’t trust sites to be salting, so I pick passwords that are strong enough that even if a site stored it using a single iteration of MD5 with no salting it would not be broken.

[benroyce@mastodon.social]

@kasperd @jupiter

that's why my password is

a æ u å æ ø i æ å

🤭

[greynerd65@mastodon.social]

@benroyce @evdelen @jupiter
I’m really very curious to find out what details regarding operational security have been disclosed

[mike805@noc.social]

@evdelen @benroyce @jupiter The slow typing is unacceptable, and it stops if I switch tabs. Nope.

[evdelen@mstdn.ca]

@mike805 @benroyce @jupiter

Click "skip intro" on the top right.

[kasperd@westergaard.social]

I have the CD with the song that line came from.

[guillotine_jones@beige.party]

@jupiter
Have your cat type your passwords.