News for hackers. Stuff that matters.
Re:UK becomes first country to ban default bad passwords on ... by teddyh on Tuesday April 30, 2024 @11:06AM (#40211802)
“OK, the new default password for all our newly-sold devices is now ‘by%8MmRsVWt#m4ZO’. Problem solved.”
Re:UK becomes first country to ban default bad passwords on ... by xanderlewis on Tuesday April 30, 2024 @11:16AM (#40211928)
I’m sorry. That’s not allowed. For security reasons, every new password must contain at least one emoji, three greek letters and one set-theoretic operator.
Re:UK becomes first country to ban default bad passwords on ... by stetrain on Tuesday April 30, 2024 @11:20AM (#40211977)
I'm sorry, based on our records you have used this emoji in a previous password. Please choose a new unique emoji.
Re:UK becomes first country to ban default bad passwords on ... by rolph on Tuesday April 30, 2024 @12:24PM (#40212794)
thats always been a concern for me.

if my past passwords can be examined for comparison with a current one, i cant shake the idea that no password is secret under such a regime

Re:UK becomes first country to ban default bad passwords on ... by bdavbdav on Tuesday April 30, 2024 @01:40PM (#40213680)
This is still compatible with one way hashing. The service just sits on the recent hashes. They’re still non reversible.
Re:UK becomes first country to ban default bad passwords on ... by rolph on Tuesday April 30, 2024 @01:48PM (#40213813)
yes, we have to trust it is done like that, as a standard.

i suppose an "evil admin" has a lot of other ways to harvest passwds, rather than one that is a major security problem.

Re:UK becomes first country to ban default bad passwords on ... by ThrowawayTestr on Tuesday April 30, 2024 @01:25PM (#40213524)
You joke but emojis should be allowed in password fields.
Re:UK becomes first country to ban default bad passwords on ... by bluefirebrand on Tuesday April 30, 2024 @02:22PM (#40214339)
Allowed but not required