News for hackers. Stuff that matters.

A comment on The password “ji32k7au4a83” has been seen over a hundred times. Parent comment

Re:The password “ji32k7au4a83” has been seen over a hundred ... by usrusr on Monday March 04, 2019 @03:26AM (#19299654)
No, the algorithms are bad as well. Transformed dictionary is hardly any better than dictionary if the transformation isn't unique.

All those annoying rules about required character classes are mainly there to prevent dictionary attacks, but "s3cr3t" is not much of an improvement over "secret" ("s4cr5t" would, because it's not the result of a popular transformation).

[ Parent | on HN ]
Re:The password “ji32k7au4a83” has been seen over a hundred ... by pishpash on Monday March 04, 2019 @04:57AM (#19300053)
Not much of an improvement, but never worse -- unless the function is not injective. You can't argue with Kolmogorov complexity. If the algorithm is secret and has computational complexity it gets better.
[ Parent | on HN ]
Re:The password “ji32k7au4a83” has been seen over a hundred ... by usrusr on Monday March 04, 2019 @07:02AM (#19300592)
Sure, but we are talking about trivial substitution schemes here. I could have been more specific.
[ Parent | on HN ]