News for hackers. Stuff that matters.

A comment on Complexify - a jQuery Plugin to ACCURATELY Gauge Password Complexity.

Re:Complexify - a jQuery Plugin to ACCURATELY Gauge Password... by hsmyers on Sunday May 13, 2012 @01:57PM (#3967689)
Not a perfect metric as he admits, but a great deal better than nothing. One thing that has bothered me from the beginning is the problem of the user's retention of the information. How do we do a min/max of sufficient complexity to deter cracking but allow the user to remember the password in question? This last is one reason that I've kept up interest in bio-metric efforts for security.
[ Parent | on HN ]
Re:Complexify - a jQuery Plugin to ACCURATELY Gauge Password... by danpalmer on Sunday May 13, 2012 @02:15PM (#3967754)
I always find alternatives to password security interesting, but I don't think any are actually feasible at the moment. We need to realise that passwords are here to stay for a long time, and we need to promote the use of strong passwords that will last a long time.

"8 characters with a number" - the criteria many normal users consider a good password, is just not good enough any more in this ago of $2.50 an hour for an EC2 instance with a few graphics cards.

[ Parent | on HN ]