Re:AmEx: "We discourage the use of special characters becaus...
by endtime on Sunday February 07, 2010 @11:38PM
(#1108968)
You use a deterministic system for generating passwords based on site? That seems only marginally better than just using the same password everwhere...unless you're doing something like using a consistent secret key to encrypt some function of the site name with AES, and using the result as your password.
[ Parent
| on HN ]
Re:AmEx: "We discourage the use of special characters becaus...
by ramchip on Monday February 08, 2010 @12:58AM
(#1109128)
I disagree. Just using a tiny variation, like adding the length of the website's name at the end, will be enough to defeat any automated system. Even for a human, figuring it out would require cracking several websites and a lot of brain cycles to spend on his particular account.
Re:AmEx: "We discourage the use of special characters becaus...
by endtime on Monday February 08, 2010 @05:37AM
(#1109465)
Well, if he used the same strong password everywhere, it would still defeat any automated system. The reason you don't use the same password everywhere is in case someone decides to try it with your email address in a bunch of different places.
If I found his password for this site was hunter2HN, I'm pretty sure I could guess his Facebook password...