Re:New NIST password guidelines: don't require character typ...
by jff on Wednesday December 14, 2016 @11:16AM
(#13177107)
> during the inevitable outage it was comically discovered two star trek fans configured two machines to the same trek quote as a password.
Was it "Live long and prosper" or "He's dead, Jim"? The latter seems more suitable given the circumstances :)
Re:New NIST password guidelines: don't require character typ...
by VLM on Wednesday December 14, 2016 @01:34PM
(#13178410)
I believe it was one of the numerous starship self destruct codes, which also technically passes the usual hoops of letters and numbers and mixed case and punctuation.
I actually looked it up: 1,1A(bunch more stuff here)000Destruct0 it was kinda long. From memory that movie even displayed it on the screen so the guys used the same capitalization and everything.
I would imagine in the "real world" outside strict culture fit requirements that a certain percentage of passwords will be popular bible verses, for example.
There's a curve where the likelihood of collision or predictability is very high with short passwords and it declines with length until it starts increasing again.
I used to use full engineering parts numbers of semiconductors I used in projects. I also used some verbose API names that I used a lot. In retrospect that's a terrible idea. I wonder how many people sitting next to me used the same password.