18 ms·
Remove my password from lists so hackers won't be able to hack me
- reificator 9y agoLook, we all intuitively get that it's a bad idea and it is definitely funny. But honestly is it helping to make fun of the poor user rather than educate them as to why their password is on the list and the importance of secure password practices? The security community I grew up with was welcoming and understanding, and it sparked an interest I never would have realized otherwise.
- badosu 9y ago> But honestly is it helping to make fun of the poor user rather than educate them as to why their password is on the list and the importance of secure password practices? I am not sure the issue poster really uses that password...
- reificator 9y agoPoe's law applies here of course, that's fair. Still...
- drdaeman 9y agoIt's easy to verify. ;) I've just checked - that's not his password.
- knodi123 9y agoif it HAD worked, and you told us, then you'd be confessing to violating the Misuse Of Computers act. So of COURSE you'd say that's not his password.
- reificator 9y agoAre you sure it wasn't their password? https://github.com/danielmiessler/SecLists/pull/155#issuecomment-353387528 https://github.com/danielmiessler/SecLists/pull/155#issuecom...
- throwaway2016a 9y agoThe user has a large number of GitHub commits and the technical knowledge needed to create a pull request probably exceeds the knowledge needed to know why this doesn't work... I feel comfortable assuming the original PR is a joke.
- reificator 9y ago> the technical knowledge needed to create a pull request probably exceeds the knowledge needed to know why this doesn't work... The plural of anecdote is not data, but I have first hand experience with someone who can make a pull request but doesn't understand password best practices at all. Granted it might be because I taught them to make pull requests, but still... I know people who wrote code for their thesis in Python but can't grasp why indentation matters. You'd be surprised by what people do and don't know.
- ci5er 9y ago> I know people who wrote code for their thesis in Python but can't grasp why indentation matters. How can one write code (that runs!) for one's thesis without paying attention to Python's semantically significant whitespace?
- felbane 9y agoPerhaps an IDE/editor that autoformats python code?
- juandazapata 9y agoIt looks like you didn't get the joke.
- CPLX 9y ago> The security community I grew up with was welcoming and understanding lol
- petecooper 9y agoCtrl + F hunter2 (4 matches) I love a good in-joke. Spoilers: http://bash.org/?244321 http://bash.org/?244321
- jagjotsingh 9y agoI am wheezing
- reificator 9y agoWhat did you search for? When you type hunter2 all I see are stars.
- deleted 9y ago[deleted]
- Beltiras 9y agoCopied the stars and then pasted that into CTRL-F
- EGreg 9y agoFun fact: You have to escape the stars for them to show up on IRC. Otherwise people see their password!
- katastic 9y agoDoes it work for usernames? Here, check mine: 8ftpenissurvivor What does that show up as?
- deleted 9y ago[deleted]
- JohnTHaller 9y agoWouldn't searching for * * * * * * * yield more than 4 matches?
- EGreg 9y agoWhenever you type that, all I see is "1-7-3-4-6-7-3-2-1-4-7-6-Charlie-3-2-7-8-9-7-7-7-6-4-3-Tango-7-3-2-Victor-7-3-1-1-7-8-8-8-7-3-2-4-7-6-7-8-9-7-6-4-3-7-6
- misingnoglic 9y agoThis is hysterical, I love that tech has their own way of humor.
- catnaroek 9y agoThey should have checked their password with https://inutile.club/estatis/password-security-checker/ https://inutile.club/estatis/password-security-checker/ . It correctly identifies both “hunter2” and “dolphins” as unsafe.
- reificator 9y agoThat's a very good resource. I typed in gibberish to make sure it was what I hoped it was.
- catnaroek 9y agoOf course, “gibberish” is also an unsafe password.
- reificator 9y agoVery true.
- whack 9y agoI don't know how safe it is to enter my password into a site I've never heard of before... Not that I'm accusing them of it, but this is the perfect setup for a phishing scam.
- catnaroek 9y agoIt's a joke site. This is what it looks like: https://i.imgur.com/Sm1IaZO.png https://i.imgur.com/Sm1IaZO.png Some people just don't have a sense of humor.
- deleted 9y ago[deleted]
- MechEStudent 9y agoSo, they want the password off the list, instead of changing it to something (much much much) more secure? Some variant of "battery horse staple and correct", right?
- linkmotif 9y agoThis is a joke.
- jameskegel 9y agoI'm going to let this one slide, because most of us are not working today for various reasons, but I must note, I've never seen this side of GitHub. I probably spend too much time cloistered in work projects to notice.
- ghrifter 9y ago> I'm going to let this one slide Thanks for your benevolence.
- jameskegel 9y agoYour snark is noted. However, unlike those that come here to delay their day's tasks, I come here to learn and be exposed to new things. As such, humor has never been a quality I seek from HN, and it detracts from the point of being here, for me.
- BoorishBears 9y agoHeyyy, it's that guy who looks down on those of us who don't use our real names! I remember because you showed a similarly poor attitude in another thread. That attitude was so out of line with what I expect from HN that your username was seared in my mind :)
- cortesoft 9y agoI think most people like to learn and have a good time at the same time.
- skinnymuch 9y agoWhy can't we seek to learn and have a laugh now and then as well?
- skinnymuch 9y agoWhy can't we seek to learn and have a laugh now and then as well? Your profile also says "Commentors with novelty usernames should not expect responses.". What if someone with a novelty username teaches you something and you have a question to further your learning. You won't respond?
- yashinovsky 9y agoFun trolling :)
- hardlianotion 9y agoNice. Subtle.
- desireco42 9y agoI don't know what to think, he knows how to make a PR but doesn't get this simple thing... :)
- noncoml 9y agoHe is trolling.. but I guess you are meta-trolling..
- zszugyi 9y agoThanks for this. I went ahead and created a merge request to remove my passwords too. /s
- mattbgates 9y agoMy address is listed in the phone book as well. Is there anyway I can get that removed? :P
- deleted 9y ago[deleted]
- gerdesj 9y agoCountry?
- mattbgates 9y agoOh, it was a joke. Guess the topic of this was meant to be serious, ha. I even got downvoted.
- icc97 9y agoOne has to suffer for one's art
- cyberferret 9y agoThat comment thread was gold, if only for the link to the most secure password in the world site... [0] [Disclaimer seeing as the original joke was missed by many - this site link is totally tongue in cheek too. DON'T use the suggested password] [0] - https://mostsecure.pw/ https://mostsecure.pw/
- darklajid 9y agoSecure Connection Failed An error occurred during a connection to mostsecure.pw. SSL received a record that exceeded the maximum permissible length. Error code: SSL_ERROR_RX_RECORD_TOO_LONG Just me? Is this just too secure™ for Firefox' liking?
- daveFNbuck 9y agoIt's just you. It worked fine for me in Firefox.
- tlrobinson 9y agoReminds me of xkcd "Random Number": https://xkcd.com/221/ https://xkcd.com/221/
- microtheo 9y agoI'm not really a security expert, but wouldn't it be harder for hacker to notice the hack if you leave it and wisely change the first letter to upper/lower case?
- peterburkimsher 9y agoThe comments are humorous, of course, in the context of sharing passwords. What if, instead of a password, the text to be censored is: 09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0 (That's a code that can be used to crack Blu-Ray discs). Further reading: https://en.wikipedia.org/wiki/AACS_encryption_key_controversy https://en.wikipedia.org/wiki/AACS_encryption_key_controvers... https://en.wikipedia.org/wiki/Digital_rights_management#Opposition https://en.wikipedia.org/wiki/Digital_rights_management#Oppo... https://www.eff.org/issues/drm https://www.eff.org/issues/drm
- stefanwlb 9y agoThis is hilarious!
- hi41 9y agoCan someone please explain. I don't understand.