4 ms·

I use a password manager, but I still use xkcd936 password for things that I have to type in often. Like the password to unlock my phone or computer, or passwor

I use a password manager, but I still use xkcd936 password for things that I have to type in often. Like the password to unlock my phone or computer, or passwords to mobile banking apps that I check often. Copy-pasting out of the password manager on a phone is a multi-step process, most of which is all of iOS's new animation delays. There's a world for both of these things, and xkcd936 passwords are very easy to generate: $ cat $(which xkcd936) #!/bin/sh cat /usr/share/dict/words | unsort | head -n 40 | xargs -n4 echo

tempestn 12y ago
Mm, ya, those make sense. On Android, Lastpass is getting better at autofilling into native apps, but it's still not foolproof. Getting better though!
avinashv 12y ago
I killed those animations in settings the day I installed iOS 7. You should too!
- ketralnis 12y ago
  How? I've only found the option to reduce motion sickness which changes the zooms and slides to fadeouts that take the same point of time
garrettr_ 12y ago
Note that `unsort` uses the Mersenne Twister for its PRNG, which is not cryptographically secure [0]. However, cracking Mersenne does require a significant amount of random bytes generated from the same seed, and a quick glance at the source reveals that it initializes the seed from /dev/urandom where available (unsort.c:169), which is good and probably obviates practical attacks. [0] https://jazzy.id.au/2010/09/22/cracking_random_number_generators_part_3.html https://jazzy.id.au/2010/09/22/cracking_random_number_genera...
- ketralnis 12y ago
  What attack are you envisioning on me running that by hand and pasting one of those passwords into an online service?