News for hackers. Stuff that matters.
Re:How I’d Hack Your Weak Passwords by Xurinos on Thursday March 25, 2010 @10:33AM (#1218512)
I can't remember if it was here or on reddit, but someone posted an interesting article that said that the big flaw with these mixed character passwords is that people have a hard time remembering them. When you start demanding that they use a different oddball password for every site, most people just write them down or ignore the advice.

The article showed an alternative to all the crazy rules: Create pass phrases instead. "I break 4 hacker news!" is much easier to remember than "f6jjaASDJc%$1~", and it fits all the insane rules we have invented for good passwords (mixed case, numbers, symbols, length).

Re:How I’d Hack Your Weak Passwords by zokier on Thursday March 25, 2010 @12:05PM (#1218681)
Whats wrong in writing passwords down? I, myself, keep most important passwords saved in my phone.
Re:How I’d Hack Your Weak Passwords by wootee on Thursday March 25, 2010 @12:23PM (#1218725)
Nothing wrong with writing them down, but put them on paper and keep them in your wallet or a safe. We put our SSN cards, driver licenses and passports and credit cards in our wallets. Why not our passwords?
Re:How I’d Hack Your Weak Passwords by yalurker on Thursday March 25, 2010 @04:35PM (#1219419)
Isn't "Never carry your social security card in your wallet" standard advice? I was taught that since I was a child, before identity theft was even really a mainstream thing.

As to credit cards, if your wallet is lost or stolen, you can quickly cancel the cards. It is probably more difficult to quickly change all your passwords.

Keeping them in a safe, however, is probably a fine idea. Potentially a good one if you want people to have access to certain accounts if something happens to you.

Re:How I’d Hack Your Weak Passwords by maneesh on Thursday March 25, 2010 @12:10PM (#1218697)
because if you lose your phone, all your passwords are compromised.
Re:How I’d Hack Your Weak Passwords by zokier on Thursday March 25, 2010 @12:34PM (#1218761)
The thief wouldn't know where the passwords go, nor my username.