News for hackers. Stuff that matters.
Re:Gmail password first character is case insensitive on mob... by rovr138 on Saturday October 09, 2021 @11:12AM (#28810537)
Doing this reduces way more the space of characters and reduces security.
Re:Gmail password first character is case insensitive on mob... by freemint on Saturday October 09, 2021 @11:43AM (#28810825)
It reduces the password strength by at most two bits. For passwords made solely of non letters there is no reduction in password strength.
Re:Gmail password first character is case insensitive on mob... by nitrogen on Saturday October 09, 2021 @01:38PM (#28811717)
It's one bit per alphabetic character, isn't it?
Re:Gmail password first character is case insensitive on mob... by smrq on Saturday October 09, 2021 @01:44PM (#28811764)
No, it's only one bit for the first character and one for the second. The case of every other character is maintained relative to the second character, so the parity there provides the one bit of information for each subsequent alphabetic character.
Re:Gmail password first character is case insensitive on mob... by nitrogen on Saturday October 09, 2021 @02:10PM (#28811937)
Whoops, I didn't notice that the two L's were still capitalized in the normalization example a few comments up.
Re:Gmail password first character is case insensitive on mob... by freemint on Saturday October 09, 2021 @05:12PM (#28813353)
*and one for the caps lock key
Re:Gmail password first character is case insensitive on mob... by remram on Saturday October 09, 2021 @11:59AM (#28810945)
It reduces the space of passwords just as much as having the backend try those same combinations for every query.