5 ms·

Just checked on haveibeenpwned correcthorsebatterystaple has been seen 130 times. It seems a lot of people took the xkcd at face value.

by el_oni 5y ago

gmac 5y ago
When implementing a password strength checker lately I relied mainly on https://github.com/dropbox/zxcvbn https://github.com/dropbox/zxcvbn (which is great) but added in a check for correct horse battery staple (and variants). Probably not that important in the big scheme of things but I thought it might get a chuckle and/or some respect if anyone happened to activate that code path.
- DicIfTEx 5y ago
  Do Dropbox not automatically flag ‘correcthorsebatterystaple’ any more?[0] [0] https://nakedsecurity.sophos.com/2012/08/13/correcthorsebatterystaple-dropbox-wit/ https://nakedsecurity.sophos.com/2012/08/13/correcthorsebatt...
mdp2021 5y ago
> It seems a lot of people Or some people stopped caring
- amelius 5y ago
  Or just people sharing accounts with random strangers.
- dredmorbius 5y ago
  This. If a system requires an account/password, and people find ways to bypass or weaken account security, perhaps you shouldn't be using accounts. In days of yore, "cypherpunk/cypherpunk" or "cypherpunks/cypherpunks" was a common convention. Those are found 140 and 38 times respectively in haveibeenpwned. Considering many systems went out of their way to prevent / disable such accounts, and the convention fell out of practice, that's notable.
taneq 5y ago
Or just ran with the joke. Likewise I'm sure somewhere out there is a codebase containing int random() { return 4; // randomly chosen by roll of a fair dice }
- ThePadawan 5y ago
  That would make a somewhat interesting testing strategy. In a similar vein, React intentionally calls user-implemented functions which are meant to be pure twice in a row (even though that's technically unnecessary), just to ensure the programmer actually makes the function pure (so the application behaves reproducably in the future).
  - taneq 5y ago
    Haha nice, if ever there was a design decision worthy of the title "glorious bastard", this is it.

Just checked on haveibeenpwned correcthorsebatterystaple has been seen 130 times. It seems a lot of people took the xkcd at face value.

by el_oni 5y ago

Just checked on haveibeenpwned correcthorsebatterystaple has been seen 130 times. It seems a lot of people took the xkcd at face value.

gmac 5y ago

When implementing a password strength checker lately I relied mainly on https://github.com/dropbox/zxcvbn https://github.com/dropbox/zxcvbn (which is great) but added in a check for correct horse battery staple (and variants). Probably not that important in the big scheme of things but I thought it might get a chuckle and/or some respect if anyone happened to activate that code path.

DicIfTEx 5y ago
Do Dropbox not automatically flag ‘correcthorsebatterystaple’ any more?[0] [0] https://nakedsecurity.sophos.com/2012/08/13/correcthorsebatterystaple-dropbox-wit/ https://nakedsecurity.sophos.com/2012/08/13/correcthorsebatt...

mdp2021 5y ago

> It seems a lot of people Or some people stopped caring

amelius 5y ago
Or just people sharing accounts with random strangers.
dredmorbius 5y ago
This. If a system requires an account/password, and people find ways to bypass or weaken account security, perhaps you shouldn't be using accounts. In days of yore, "cypherpunk/cypherpunk" or "cypherpunks/cypherpunks" was a common convention. Those are found 140 and 38 times respectively in haveibeenpwned. Considering many systems went out of their way to prevent / disable such accounts, and the convention fell out of practice, that's notable.

taneq 5y ago

Or just ran with the joke. Likewise I'm sure somewhere out there is a codebase containing int random() { return 4; // randomly chosen by roll of a fair dice }

ThePadawan 5y ago
That would make a somewhat interesting testing strategy. In a similar vein, React intentionally calls user-implemented functions which are meant to be pure twice in a row (even though that's technically unnecessary), just to ensure the programmer actually makes the function pure (so the application behaves reproducably in the future).
- taneq 5y ago
  Haha nice, if ever there was a design decision worthy of the title "glorious bastard", this is it.