3 ms·
I had to learn the hard way
by jchook 7y ago
I had to learn the hard way
- Moru 7y agoI worked with home support for an ISP. A few times I was at a customer helping with a router and the mother call her son to get the password for the router. Not always a nice password...
- philwelch 7y agoI very much believe in offensive passwords/passphrases (maybe not for wireless routers) specifically because: (a) You're not supposed to tell anybody what they are. (b) Offensive passphrases are easier to remember.
- ses1984 7y agoAlso easier to crack if an attacker knows that detail.
- philwelch 7y agoNot that it narrows it down that much.
- ses1984 7y agoYou could probably throw out 90% or more of dictionary words for your permutations, I'd say that is significant enough to paint a target on your back.
- philwelch 7y agoIf your password is derived from a four word phrase (per the XKCD formula, which isn’t the only one), potentially all of the individual words could be inoffensive in isolation. There’s no obvious way to operationalize the human intuition of offense in a way that restricts the search space if you’re smart about it.
- ses1984 7y agoIt all depends on if you have anything worth cracking. Sure, if your average hn reader encrypts a password db with a dirty four word phrase, that reader will be fine because no one is willing to rub two pennies together to crack that. On the other hand if you're protecting secrets actually worth something...