Re:Show HN: Find journalists, bloggers and webmasters coveri...
by chrismorgan on Tuesday June 16, 2020 @10:12AM
(#23539338)
You’ll be glad to know that Password1! passed muster.
In other words, if you didn’t already know it, this site is enforcing terrible security practice, and not trying to filter out known-bad passwords. (zxcvbn would laugh at you for trying that. Basically every site that deals with setting passwords should use it.)
The reason it’s terrible security practice is that literally most people will just capitalise the first letter, or add a one, or add an exclamation mark, so it adds roughly no security while making people use passwords that they can’t remember, so they store them insecurely, &c. Sure, people should use password managers and all that, but they don’t.
In other words, if you didn’t already know it, this site is enforcing terrible security practice, and not trying to filter out known-bad passwords. (zxcvbn would laugh at you for trying that. Basically every site that deals with setting passwords should use it.)
The reason it’s terrible security practice is that literally most people will just capitalise the first letter, or add a one, or add an exclamation mark, so it adds roughly no security while making people use passwords that they can’t remember, so they store them insecurely, &c. Sure, people should use password managers and all that, but they don’t.