News for hackers. Stuff that matters.

A comment on Sites with dumb password rules. Parent comment

Re:Sites with dumb password rules by wool_gather on Friday September 06, 2019 @12:07PM (#20896868)
In order to deploy this successfully, the attacker would have to know that you used a random string...how would they know this without having access to the string itself?
[ Parent | on HN ]
Re:Sites with dumb password rules by coryfklein on Friday September 06, 2019 @12:54PM (#20897327)
Not necessarily - they're given multiple "tries" so they can just pick "a bunch of random letters" as one of their first few choices in hopes that they guessed correctly.
[ Parent | on HN ]