5 ms·

Look, we all intuitively get that it's a bad idea and it is definitely funny. But honestly is it helping to make fun of the poor user rather than educate them

Look, we all intuitively get that it's a bad idea and it is definitely funny. But honestly is it helping to make fun of the poor user rather than educate them as to why their password is on the list and the importance of secure password practices? The security community I grew up with was welcoming and understanding, and it sparked an interest I never would have realized otherwise.

badosu 9y ago
> But honestly is it helping to make fun of the poor user rather than educate them as to why their password is on the list and the importance of secure password practices? I am not sure the issue poster really uses that password...
- reificator 9y ago
  Poe's law applies here of course, that's fair. Still...
  - drdaeman 9y ago
    It's easy to verify. ;) I've just checked - that's not his password.
    - knodi123 9y ago
      if it HAD worked, and you told us, then you'd be confessing to violating the Misuse Of Computers act. So of COURSE you'd say that's not his password.
    - reificator 9y ago
      Are you sure it wasn't their password? https://github.com/danielmiessler/SecLists/pull/155#issuecomment-353387528 https://github.com/danielmiessler/SecLists/pull/155#issuecom...
throwaway2016a 9y ago
The user has a large number of GitHub commits and the technical knowledge needed to create a pull request probably exceeds the knowledge needed to know why this doesn't work... I feel comfortable assuming the original PR is a joke.
- reificator 9y ago
  > the technical knowledge needed to create a pull request probably exceeds the knowledge needed to know why this doesn't work... The plural of anecdote is not data, but I have first hand experience with someone who can make a pull request but doesn't understand password best practices at all. Granted it might be because I taught them to make pull requests, but still... I know people who wrote code for their thesis in Python but can't grasp why indentation matters. You'd be surprised by what people do and don't know.
  - ci5er 9y ago
    > I know people who wrote code for their thesis in Python but can't grasp why indentation matters. How can one write code (that runs!) for one's thesis without paying attention to Python's semantically significant whitespace?
    - felbane 9y ago
      Perhaps an IDE/editor that autoformats python code?
      - ci5er 9y ago
        I am now more than a little embarrassed that this didn't even occur to me...
        arthulia 9y ago
        It doesn't make a whole ton of sense because you'd still need to know when to un-indent in order to get out of a conditional block. IDEs can't read your mind.
juandazapata 9y ago
It looks like you didn't get the joke.
CPLX 9y ago
> The security community I grew up with was welcoming and understanding lol

badosu 9y ago

> But honestly is it helping to make fun of the poor user rather than educate them as to why their password is on the list and the importance of secure password practices? I am not sure the issue poster really uses that password...

reificator 9y ago
Poe's law applies here of course, that's fair. Still...
- drdaeman 9y ago
  It's easy to verify. ;) I've just checked - that's not his password.
  - knodi123 9y ago
    if it HAD worked, and you told us, then you'd be confessing to violating the Misuse Of Computers act. So of COURSE you'd say that's not his password.
  - reificator 9y ago
    Are you sure it wasn't their password? https://github.com/danielmiessler/SecLists/pull/155#issuecomment-353387528 https://github.com/danielmiessler/SecLists/pull/155#issuecom...

throwaway2016a 9y ago

The user has a large number of GitHub commits and the technical knowledge needed to create a pull request probably exceeds the knowledge needed to know why this doesn't work... I feel comfortable assuming the original PR is a joke.

reificator 9y ago
> the technical knowledge needed to create a pull request probably exceeds the knowledge needed to know why this doesn't work... The plural of anecdote is not data, but I have first hand experience with someone who can make a pull request but doesn't understand password best practices at all. Granted it might be because I taught them to make pull requests, but still... I know people who wrote code for their thesis in Python but can't grasp why indentation matters. You'd be surprised by what people do and don't know.
- ci5er 9y ago
  > I know people who wrote code for their thesis in Python but can't grasp why indentation matters. How can one write code (that runs!) for one's thesis without paying attention to Python's semantically significant whitespace?
  - felbane 9y ago
    Perhaps an IDE/editor that autoformats python code?
    - ci5er 9y ago
      I am now more than a little embarrassed that this didn't even occur to me...
      - arthulia 9y ago
        It doesn't make a whole ton of sense because you'd still need to know when to un-indent in order to get out of a conditional block. IDEs can't read your mind.

juandazapata 9y ago

It looks like you didn't get the joke.

CPLX 9y ago

> The security community I grew up with was welcoming and understanding lol