News for hackers. Stuff that matters.
Re:Ask HN: What is your password management solution? by prophesi on Saturday July 15, 2017 @11:59AM (#14777300)
"Pretty much anything that can be remembered can be cracked."

Randomly choose 6 words from a 10k English dictionary and you're set. Hell, make it 12 words. Still insanely easier to remember than a 12 character alphanumeric/symbol password, and much more difficult to crack.

Re:Ask HN: What is your password management solution? by scott00 on Saturday July 15, 2017 @02:11PM (#14778041)
I'm partial to using a very broad dictionary: http://app.aspell.net/create?max_size=35&spelling=US&max_var....

It has 50,105 words. Gets you an extra 2.3 bits per word.

Re:Ask HN: What is your password management solution? by SAI_Peregrinus on Saturday July 15, 2017 @05:29PM (#14779069)
Better yet, use the EFF's Diceware list. It's easy to pick randomly from the list (just roll some dice) and the resulting passphrase won't have some of the issues a dictonary chosen one would have, like compound words causing entropy reductions. (EG if fire, truck, and firetruck are included in the dictionary as 3 separate words and you happen to get fire and truck in sequence as part of your passphrase the entropy of those two words is equivalent to the entropy of a single word! Not good.)
Re:Ask HN: What is your password management solution? by dheera on Sunday July 16, 2017 @01:48PM (#14783209)
> if fire, truck, and firetruck are included in the dictionary as 3 separate words and you happen to get fire and truck in sequence as part of your passphrase the entropy of those two words is equivalent to the entropy of a single word

Not exactly true if they are separate words. In a word-based password scheme, you are treating entire words, not characters, as units. The chance of fire, truck, and firetruck appearing in one password in that sequence, given a 10K word dictionary, is 1/(10K^3). The miniscule possibility of this speaks to the fact that there actually is a large entropy.

Re:Ask HN: What is your password management solution? by Bromskloss on Saturday July 15, 2017 @09:20PM (#14780009)
I realised after choosing random words that gets annoyingly long to type. In that regard, random characters are better.