News for hackers. Stuff that matters.

A comment on Complexify - a jQuery Plugin to ACCURATELY Gauge Password Complexity.

Re:Complexify - a jQuery Plugin to ACCURATELY Gauge Password... by ElliotH on Sunday May 13, 2012 @02:16PM (#3967761)
Only real issue I can see is that a length 10 string of random lower case letters is given the same rating as a 10 letter long dictionary word (whereas ofc the dictionary word would be cracked first).
[ Parent | on HN ]
Re:Complexify - a jQuery Plugin to ACCURATELY Gauge Password... by danpalmer on Sunday May 13, 2012 @02:21PM (#3967773)
Yep, and I did actually put at the bottom that this does not have any indication of how crackable it would be with a dictionary attack. Unfortunately I don't think that's feasible.
[ Parent | on HN ]
Re:Complexify - a jQuery Plugin to ACCURATELY Gauge Password... by mmastrac on Sunday May 13, 2012 @02:23PM (#3967778)
You could potentially 'compress' the dictionary into a bloom filter. You'd have a chance of false positives (ie: a word looks like a dictionary word), but that's probably acceptable in this case.
[ Parent | on HN ]