4 ms·

(One word more) relevant XKCD [1]. Also, a generator for the above [2]. [1] https://xkcd.com/936/ https://xkcd.com/936/ [2] https://www.correcthorsebatterysta

(One word more) relevant XKCD [1]. Also, a generator for the above [2]. [1] https://xkcd.com/936/ https://xkcd.com/936/ [2] https://www.correcthorsebatterystaple.net/ https://www.correcthorsebatterystaple.net/

jonplackett 5y ago
Do you think it’s bad that I set my password to correcthorsebatterystaple for all my accounts?
- el_oni 5y ago
  Just checked on haveibeenpwned correcthorsebatterystaple has been seen 130 times. It seems a lot of people took the xkcd at face value.
  - gmac 5y ago
    When implementing a password strength checker lately I relied mainly on https://github.com/dropbox/zxcvbn https://github.com/dropbox/zxcvbn (which is great) but added in a check for correct horse battery staple (and variants). Probably not that important in the big scheme of things but I thought it might get a chuckle and/or some respect if anyone happened to activate that code path.
    - DicIfTEx 5y ago
      Do Dropbox not automatically flag ‘correcthorsebatterystaple’ any more?[0] [0] https://nakedsecurity.sophos.com/2012/08/13/correcthorsebatterystaple-dropbox-wit/ https://nakedsecurity.sophos.com/2012/08/13/correcthorsebatt...
  - mdp2021 5y ago
    > It seems a lot of people Or some people stopped caring
    - amelius 5y ago
      Or just people sharing accounts with random strangers.
    - dredmorbius 5y ago
      This. If a system requires an account/password, and people find ways to bypass or weaken account security, perhaps you shouldn't be using accounts. In days of yore, "cypherpunk/cypherpunk" or "cypherpunks/cypherpunks" was a common convention. Those are found 140 and 38 times respectively in haveibeenpwned. Considering many systems went out of their way to prevent / disable such accounts, and the convention fell out of practice, that's notable.
  - taneq 5y ago
    Or just ran with the joke. Likewise I'm sure somewhere out there is a codebase containing int random() { return 4; // randomly chosen by roll of a fair dice }
    - ThePadawan 5y ago
      That would make a somewhat interesting testing strategy. In a similar vein, React intentionally calls user-implemented functions which are meant to be pure twice in a row (even though that's technically unnecessary), just to ensure the programmer actually makes the function pure (so the application behaves reproducably in the future).
      - taneq 5y ago
        Haha nice, if ever there was a design decision worthy of the title "glorious bastard", this is it.
- nagrom 5y ago
  Except for your HN account, unfortunately.

jonplackett 5y ago

Do you think it’s bad that I set my password to correcthorsebatterystaple for all my accounts?

el_oni 5y ago
Just checked on haveibeenpwned correcthorsebatterystaple has been seen 130 times. It seems a lot of people took the xkcd at face value.
- gmac 5y ago
  When implementing a password strength checker lately I relied mainly on https://github.com/dropbox/zxcvbn https://github.com/dropbox/zxcvbn (which is great) but added in a check for correct horse battery staple (and variants). Probably not that important in the big scheme of things but I thought it might get a chuckle and/or some respect if anyone happened to activate that code path.
  - DicIfTEx 5y ago
    Do Dropbox not automatically flag ‘correcthorsebatterystaple’ any more?[0] [0] https://nakedsecurity.sophos.com/2012/08/13/correcthorsebatterystaple-dropbox-wit/ https://nakedsecurity.sophos.com/2012/08/13/correcthorsebatt...
- mdp2021 5y ago
  > It seems a lot of people Or some people stopped caring
  - amelius 5y ago
    Or just people sharing accounts with random strangers.
  - dredmorbius 5y ago
    This. If a system requires an account/password, and people find ways to bypass or weaken account security, perhaps you shouldn't be using accounts. In days of yore, "cypherpunk/cypherpunk" or "cypherpunks/cypherpunks" was a common convention. Those are found 140 and 38 times respectively in haveibeenpwned. Considering many systems went out of their way to prevent / disable such accounts, and the convention fell out of practice, that's notable.
- taneq 5y ago
  Or just ran with the joke. Likewise I'm sure somewhere out there is a codebase containing int random() { return 4; // randomly chosen by roll of a fair dice }
  - ThePadawan 5y ago
    That would make a somewhat interesting testing strategy. In a similar vein, React intentionally calls user-implemented functions which are meant to be pure twice in a row (even though that's technically unnecessary), just to ensure the programmer actually makes the function pure (so the application behaves reproducably in the future).
    - taneq 5y ago
      Haha nice, if ever there was a design decision worthy of the title "glorious bastard", this is it.
nagrom 5y ago
Except for your HN account, unfortunately.