Post a boarding pass on Facebook, get your account stolen

Re:Post a boarding pass on Facebook, get your account stolen by Natanael_L on Saturday September 23, 2017 @02:45PM (#15321056)

You just need a larger number of random words to reach the same entropy as random passwords. It's not like your random password is made up from secret alphabets!

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by pault on Saturday September 23, 2017 @02:51PM (#15321078)

Sentences aren't random.

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by xelxebar on Monday September 25, 2017 @05:32AM (#15329026)

You seem to be misunderstanding how diceware works. You randomly generate numbers by throwing dice. Every five rolls indexes exactly one "diceware" word. So even if an attacker knew we were using diceware, each word contains

    log2(6^5) = log2(7776) ≈ 12.9 bits

of entropy. If you want 128 bits of etropy in your security question field, then just randomly generate 10 diceware words. This is comparable to choosing 20 random printable ascii characters or so.

Since we pick the words by literally throwing dice, English grammar has nothing to do with it.

[ Parent | on HN ]

Re:Post a boarding pass on Facebook, get your account stolen by pault on Monday September 25, 2017 @10:32AM (#15330790)

I was responding to someone who was recommending using sentences from books as passwords. Hence the comment about grammar.

[ Parent | on HN ]