Czech your passwords.
-
@evdelen @benroyce @jupiter
I’ve done this test before, using the same device, and this programme did NOT recognise me – or rather, my device.
All the details about my device were wrong again: two matches – namely ‘Windows’ (which almost every device has; I would at least have expected the version to be specified) and ‘x86’ (which is also standard, but the RAM was listed incorrectly too).
So it seems my settings are correct."directorate of analysis, make a note on this file: greynerd65 fell for the social hack of leaking opsec details by luring them into a false sense of informality"
-
Enter password
RødgrødMedFløde
Enter password
RødgrødMedFløde
Enter password
That is my password!
There's something off about how you type the password. Access denied
Interestingly the lower case version of that password is found in exactly one leak known to https://haveibeenpwned.com/Passwords
-
@jupiter the impossible-to-pronounce-for-a-non-Czech password
The pronunciation point got me wondering whether an American would be able to pronounce this password: zzzccccczczczcczczcc
-
In all seriousness this is a genuine problem (due to UTF-8 normalization-- composition vs decomposition) if you switch between MacOS (always use ASCII latin letter codepoint + diacritic codepoint, no matter what; i.e. "o" + "/", "r" + carron, etc.) and anything else (always prefere one single codepoint if the accented letter exists, e.g., in the Latin-1 block: "ø", Latin Extended-A block: "ř")
... -
For sure, leaving out the salt is highly irresponsible.
But I don’t trust sites to be salting, so I pick passwords that are strong enough that even if a site stored it using a single iteration of MD5 with no salting it would not be broken.
-
P pelle@veganism.social shared this topic
-
Interestingly the lower case version of that password is found in exactly one leak known to https://haveibeenpwned.com/Passwords
-
"directorate of analysis, make a note on this file: greynerd65 fell for the social hack of leaking opsec details by luring them into a false sense of informality"
-
Follow this one past the typing test... Not that far off from the truth.
-
-
I have the CD with the song that line came from.
-
Czech your passwords.
@jupiter
Have your cat type your passwords. -
The pronunciation point got me wondering whether an American would be able to pronounce this password: zzzccccczczczcczczcc
-
"THEY DID IT AGAIN! WRITE THIS DOWN!"
i'm just being a jerk
i'm good at it
🤭
-
I have the CD with the song that line came from.
Sorry I misremembered. The actual line in that song is:
A æ u i æ å, u i å æ ø -
The pronunciation point got me wondering whether an American would be able to pronounce this password: zzzccccczczczcczczcc
-
I totally agree with that. There was a time where I used machines with both Danish and American keyboard layouts on a daily basis. So I learned to pick passwords consisting of only characters that were located in the same place on both keyboards.
And that was a time when only ASCII was supported, so I had to keep that in mind as well.
The best way to make passwords stronger is to make them longer rather than using more different characters.
I am so annoyed by sites that get this wrong. First they reject my 32 character password because it’s too long. So I try truncating my password to 12, 16, or 20 characters (whatever they permit), and then they reject it because I only have alphanumeric characters. Seriously, the password I started with was stronger than such a short password could ever be. So the weakness of the password I am trying is entirely caused by their low limit on password length and not by the set of characters I had chosen to use.
A user should be allowed to use a password consisting of only two distinct characters as long as it’s long enough and doesn’t have any patterns.
@kasperd @MegaMichelle @CrackMeIfYouCan @kajer @jupiter at one point Linux boot-time FS decrypt wouldn't use the O/S locale, but en-US, so here in en-GB things like @ in pass phrases were... Interesting...
-
@kasperd @MegaMichelle @CrackMeIfYouCan @kajer @jupiter at one point Linux boot-time FS decrypt wouldn't use the O/S locale, but en-US, so here in en-GB things like @ in pass phrases were... Interesting...
Imagine how the German and the French would deal with that.
-
Imagine how the German and the French would deal with that.
@kasperd @MegaMichelle @CrackMeIfYouCan @kajer @jupiter keep two different keyboards on your desk?
-
Czech your passwords.
-
Czech your passwords.
@jupiter And doucle-Czech your password checker?
