News for hackers. Stuff that matters.
Re:Why don't we have password standards? by Khao on Wednesday August 10, 2011 @01:01PM (#2869134)
The only standard we should set is a minimum length that is not too short. Something like 8 characters minimum. I don't care if you use only number or only letter, use whatever you want, it's YOUR security after all! The longer the password, the more likely it is to be unique!

My password has been letters + numbers at the end for a long time and I know it's secure because it's not a common word or numbers that have to do with me. No capitals, no punctuations, only lowercase letters and numbers. When a website forces me to use other letters in my password, I keep forgetting it and I am forced to use "Lost my password" all the time, which makes me want to use that service less and less.

Were you inspired to post this by today's XKCD comic? Link : http://xkcd.com/936/

Re:Why don't we have password standards? by dfc on Wednesday August 10, 2011 @01:22PM (#2869230)
I do not mean to single you out but this is a viewpoint that I have never really unsderstood. If you do not care about "my security" then why have a length requirement?
Re:Why don't we have password standards? by mattbot5000 on Wednesday August 10, 2011 @01:52PM (#2869347)
You don't want your product to be the one with hundreds of people having their accounts compromised. This warrants a bare minimum of password requirements.
Re:Why don't we have password standards? by dfc on Wednesday August 10, 2011 @01:57PM (#2869367)
Exactly. So you do care about the security of the users.
Re:Why don't we have password standards? by millzlane on Wednesday August 10, 2011 @02:27PM (#2869517)
No, he cares about the reputation of his product being spoiled by the intellectually challenged.
Re:Why don't we have password standards? by vaksel on Wednesday August 10, 2011 @01:04PM (#2869147)
that and because I needed to login into verizon today, and was reminded with error messages that they don't allow any special characters in their passwords