3 ms·

You can create a password that consists entirely of lowercase letters that is easy to enter on such a keyboard and also secure. The point is to not reuse it on

by paxys 3y ago

You can create a password that consists entirely of lowercase letters that is easy to enter on such a keyboard and also secure. The point is to not reuse it on your other accounts.

tmpz22 3y ago
> that is easy Anyone who has supported digital devices for friends and family (especially elderly ones) knows it is in fact not easy. These accounts exist for the commercial benefit of companies. They could tie authorization to the hardware if they wanted to, like it used to be before the internet, but they don't. The idea that consumers need to do data and security management for the commercial benefit of corporations has gotten absurd. We're doing their IT for them, and still getting hacked even when we do it right. Remember Equifax? Pepperidge farms remembers Equifax.
bdcravens 3y ago
all lower case won't pass many password requirements. That said, it's possible to come up with an easy to remember scheme and is unique (like {ServiceName}@{houseNumber} or the like).
- suzzer99 3y ago
  My mom did this with the name of the website and her birthday. Amazingly, hackers figured out her cypher.
  - barfbagginus 3y ago
    That's not too amazing if we're cracking a leaked password database. In that case, we generate passwords and try them against every (hash, salt) pair in the database. We can usually crack 60 percent of a database this way, and more if we use AI driven cracking (PassGAN, 2017). It makes sense to try variants of "netflix{birthday}" early on, since that uncovers a significant portion of the database. Your mom would have just been unlucky to be part of that low-hanging cohort.
  - bdcravens 3y ago
    It's definitely not the most secure system, and I'd never use it for anything other than streaming entertainment, since once there's a breach at one place, anyone looking at the list can guess other sites easily.
bee_rider 3y ago
It would actually be kind of interesting to have a password manager that generated passwords that are “nice” for entering with a tv remote. It would definitely reduce the complexity of the passwords, but then you can just go longer. I’d probably want rules like “Characters should be adjacent on that particular gridded qwerty keyboard that TVs tend to use or two-off in a single directions. Double characters are also ok. Long strings of upper or lower case letters.” I guess the number of possible passwords is something like 26*(9^(n-1)), ignoring special characters and (rare) case changes. Also ignoring the edges of the keyboard, which probably really messes my path up because it isn’t very tall.
kevin_thibedeau 3y ago
You'd need 15+ lowercase characters to be close to secure. How many are going to do that?

by paxys 3y ago

You can create a password that consists entirely of lowercase letters that is easy to enter on such a keyboard and also secure. The point is to not reuse it on your other accounts.

tmpz22 3y ago

> that is easy Anyone who has supported digital devices for friends and family (especially elderly ones) knows it is in fact not easy. These accounts exist for the commercial benefit of companies. They could tie authorization to the hardware if they wanted to, like it used to be before the internet, but they don't. The idea that consumers need to do data and security management for the commercial benefit of corporations has gotten absurd. We're doing their IT for them, and still getting hacked even when we do it right. Remember Equifax? Pepperidge farms remembers Equifax.

bdcravens 3y ago

all lower case won't pass many password requirements. That said, it's possible to come up with an easy to remember scheme and is unique (like {ServiceName}@{houseNumber} or the like).

suzzer99 3y ago
My mom did this with the name of the website and her birthday. Amazingly, hackers figured out her cypher.
- barfbagginus 3y ago
  That's not too amazing if we're cracking a leaked password database. In that case, we generate passwords and try them against every (hash, salt) pair in the database. We can usually crack 60 percent of a database this way, and more if we use AI driven cracking (PassGAN, 2017). It makes sense to try variants of "netflix{birthday}" early on, since that uncovers a significant portion of the database. Your mom would have just been unlucky to be part of that low-hanging cohort.
- bdcravens 3y ago
  It's definitely not the most secure system, and I'd never use it for anything other than streaming entertainment, since once there's a breach at one place, anyone looking at the list can guess other sites easily.

bee_rider 3y ago

It would actually be kind of interesting to have a password manager that generated passwords that are “nice” for entering with a tv remote. It would definitely reduce the complexity of the passwords, but then you can just go longer. I’d probably want rules like “Characters should be adjacent on that particular gridded qwerty keyboard that TVs tend to use or two-off in a single directions. Double characters are also ok. Long strings of upper or lower case letters.” I guess the number of possible passwords is something like 26*(9^(n-1)), ignoring special characters and (rare) case changes. Also ignoring the edges of the keyboard, which probably really messes my path up because it isn’t very tall.

kevin_thibedeau 3y ago

You'd need 15+ lowercase characters to be close to secure. How many are going to do that?