5 ms·
While you're correct mathematically, I still think it's a good habit to give zero information about your password. If you attempt to estimate the information le
by dTal 8y ago
While you're correct mathematically, I still think it's a good habit to give zero information about your password. If you attempt to estimate the information leakage with every "hint", sooner or later you'll slip up.
- z29LiTp5qUC30n 8y agoMy view is your secrets should be secure even if the attacker knows everything about how they are generated and used. For example: My password is 8192 characters long, leveraging only the ASCII character set (except \n\r\t\0) It is changed every 28days at 11:05am It is only used on exactly 1 website and the username on that website is also only used on that website and randomly generated as well. Good luck (Tell me how and where I can make this stronger)
- FabHK 8y agoWith your username, I actually believe you...
- kakarot 8y agoTelling someone your password is 8 characters long and memorable vs telling them it is 8192 characters long and unrecallable are two entirely different things.
- tripzilch 8y ago> Tell me how and where I can make this stronger Make it 8193 characters long, change it every 27 days at 11:04am, but most importantly: use it on exactly 0 websites. Good luck
- asveikau 8y agoThis is a very hilarious post. Bravo, sir, or brava, madam. (Revealing your gender would likely be a security risk - if you leave that unspecified it doubles the space of possibilities!) I don't know what joyless types would downvote you.