News for hackers. Stuff that matters.
Re:The password “ji32k7au4a83” has been seen over a hundred ... by acqq on Sunday March 03, 2019 @06:27PM (#19297607)
Searching a little (it's easy because it's unique) and then automatically translating 2014 article titled:

"How to set up a safe and easy to remember password"

reveals:

http://www.netqna.com/2014/05/do-not-set-up-weak-password.ht...

"4. Using Chinese input method:

For example, the phonetic input method of the four" (I guess in Chinese, op. acqq) "words "My Password" is the combination of "ji32k7au4a83"."

Sure, safe. Just for you and everybody who read that. No problem at all.

And some user of some gaming(?) site used it for his username:

https://web.poe.garena.tw/account/view-profile/ji32k7au4a83

Re:The password “ji32k7au4a83” has been seen over a hundred ... by davik on Sunday March 03, 2019 @07:37PM (#19297942)
Here's the entire translated version

Using the above principles, how can we design a good password?

Tip 1: Replace characters with ones that sound the same

For example, you can replace the letter e in succeed with the number 1 {note this sounds the same in Mandarin}, so that it becomes succ11d, which is easy to remember and combines numbers and letters.

Tip 2: Replace characters with ones that look the same

For example, you can replace the o in dog with 0 and it becomes d0g. It mixes letters and numbers.

Tip 3: fill with special symbols

For example, the above password d0g is not long enough, so you can add special symbols at the end, e.g. d0g!(!(!(!(!(!(, it will be easy to remember, but hackers will need 12,340 centuries to crack it.

Tip 4: Using Chinese input method

For example, the phonetic input method of the four words "My Password" is the combination of "ji32k7au4a83". At first glance, it is a random combination, but it is meaningful.

Pretty hilarious all around, anyone checked if d0g!(!(!(!(!(!( is in the database too?

Re:The password “ji32k7au4a83” has been seen over a hundred ... by M2Ys4U on Sunday March 03, 2019 @07:53PM (#19298010)
>Pretty hilarious all around, anyone checked if d0g!(!(!(!(!(!( is in the database too?

I just checked and... looks like it's not been seen by HIBP:

>Good news — no pwnage found!

>This password wasn't found in any of the Pwned Passwords loaded into Have I Been Pwned. That doesn't necessarily mean it's a good password, merely that it's not indexed on this site. If you're not already using a password manager, go and download 1Password and change all your passwords to be strong and unique.

Re:The password “ji32k7au4a83” has been seen over a hundred ... by pishpash on Sunday March 03, 2019 @09:20PM (#19298319)
The hilarious part is these are used as examples to illustrate an algorithm, not to suggest you use them as actual secrets.
Re:The password “ji32k7au4a83” has been seen over a hundred ... by usrusr on Monday March 04, 2019 @03:26AM (#19299654)
No, the algorithms are bad as well. Transformed dictionary is hardly any better than dictionary if the transformation isn't unique.

All those annoying rules about required character classes are mainly there to prevent dictionary attacks, but "s3cr3t" is not much of an improvement over "secret" ("s4cr5t" would, because it's not the result of a popular transformation).

Re:The password “ji32k7au4a83” has been seen over a hundred ... by pishpash on Monday March 04, 2019 @04:57AM (#19300053)
Not much of an improvement, but never worse -- unless the function is not injective. You can't argue with Kolmogorov complexity. If the algorithm is secret and has computational complexity it gets better.
Re:The password “ji32k7au4a83” has been seen over a hundred ... by usrusr on Monday March 04, 2019 @07:02AM (#19300592)
Sure, but we are talking about trivial substitution schemes here. I could have been more specific.