3 ms·
all lower case won't pass many password requirements. That said, it's possible to come up with an easy to remember scheme and is unique (like {ServiceName}@{ho
by bdcravens 3y ago
all lower case won't pass many password requirements.
That said, it's possible to come up with an easy to remember scheme and is unique (like {ServiceName}@{houseNumber} or the like).
- suzzer99 3y agoMy mom did this with the name of the website and her birthday. Amazingly, hackers figured out her cypher.
- barfbagginus 3y agoThat's not too amazing if we're cracking a leaked password database. In that case, we generate passwords and try them against every (hash, salt) pair in the database. We can usually crack 60 percent of a database this way, and more if we use AI driven cracking (PassGAN, 2017). It makes sense to try variants of "netflix{birthday}" early on, since that uncovers a significant portion of the database. Your mom would have just been unlucky to be part of that low-hanging cohort.
- bdcravens 3y agoIt's definitely not the most secure system, and I'd never use it for anything other than streaming entertainment, since once there's a breach at one place, anyone looking at the list can guess other sites easily.