News for hackers. Stuff that matters.
Re:What’s new in the Windows 10 May 2020 Update by 8fingerlouie on Thursday May 28, 2020 @07:08AM (#23335924)
> Go passwordless. Did you know—for improved security and a simple sign-in experience, you can sign in with your face, fingerprint or PIN

How on earth would a 4-6 digit PIN be more secure than my 20+ character password ? In the end, an PIN is just another password. They may employ a million iterations to their KDF, but 6 digits is still a lot easier to bruteforce than 20 characters.

As for the rest, fingerprint and face, they're not secure. Convenient yes, secure no.

Re:What’s new in the Windows 10 May 2020 Update by PieUser on Thursday May 28, 2020 @08:10AM (#23336311)
Re:What’s new in the Windows 10 May 2020 Update by 8fingerlouie on Friday May 29, 2020 @07:16AM (#23348626)
Oh, so a (Windows 10) PIN is more or less like a password, allowing PIN (Password) policies to make complex PINs including letters and punctuation...

Explain to me again how this is better than just a password ?

Re:What’s new in the Windows 10 May 2020 Update by fowl2 on Friday May 29, 2020 @10:14AM (#23350178)
Because that PIN can only be used on that device, whereas your password can be used from anywhere. Think of it like 2FA where one of the factors is physical possession of the device.
Re:What’s new in the Windows 10 May 2020 Update by ToFab123 on Friday May 29, 2020 @04:41AM (#23347712)
> How on earth would a 4-6 digit PIN be more secure than my 20+ character password ?

Because a 4 - 6 digit PIN you can remember, while a 20+ character password you write down and in many cases store insecurely. Some even store it on a post-it note next to the keyboard.

Re:What’s new in the Windows 10 May 2020 Update by 8fingerlouie on Friday May 29, 2020 @07:15AM (#23348612)
Still doesn't change the fact that a 4-6 digit pin is a lot less secure.

As for remembering 20+ character passwords, "Correct Horse Battery Staple" (https://xkcd.com/936/) is a fine method for passwords. It doesn't have to be serial port line noise.

Re:What’s new in the Windows 10 May 2020 Update by gbba on Thursday May 28, 2020 @10:01AM (#23337302)
PIN is probably not the best term they could've chosen since the term implies it should be a number.

However in this case, the Windows 10 "PIN" can actually be a longer password.

Re:What’s new in the Windows 10 May 2020 Update by 8fingerlouie on Friday May 29, 2020 @07:18AM (#23348642)
>However in this case, the Windows 10 "PIN" can actually be a longer password.

So why is it better to have a longer PIN instead of a longer password ?

If a PIN is just another password with the same length/complexity requirements as a regular password, why should i bother ?

Re:What’s new in the Windows 10 May 2020 Update by soylentcola on Thursday May 28, 2020 @01:28PM (#23339996)
Like a personal identification npassword?

Seriously, though, PIN implies a number for a reason (even if people don't think about it or say things like "PIN number"). They should expect confusion if they refer to a password as a PIN.