News for hackers. Stuff that matters.
Re:NIST advises services to not require that passwords be ch... by pwg on Saturday May 20, 2017 @04:10PM (#14384119)
> You can even use this to defeat keyloggers.

If you have a keylogger, your first order of business should be to clean out the keylogger.

The very presence of a keylogger makes the machine insecure for entry of any passwords, no matter how you do the entry.

> Keyloggers will capture cntr-v but they won't capture how many characters you selected.

Why would you think a keylogger could not recognize the ctrl-v and then ask for the contents of the clipboard itself so it can log what was pasted?

Re:NIST advises services to not require that passwords be ch... by LinuxBender on Saturday May 20, 2017 @05:46PM (#14384523)
I've never run across one that does, but that is certainly a risk too.