Such an awesome chart!!!

Love this comment on the reddit post: “My skills were forged in the flames of AUTOEXEC.BAT and Soundblaster drivers”

It’s from a discussion of how various age groups might be more or less savvy when it comes to selecting a PIN.

Ha, I liked that one too.

I wonder if I’m more technically savvy as a millennial, though. My kids are clueless about computers despite genuine effort on my part, and I’m not sure if that’s a fair representation of kids their age. I was able to do so much with computers at 15 years… it’s more than a little unnerving seeing them scratch their head at an iPad occasionally, or have NO clue how they’d do almost anything an app does for them within Apple’s ecosystem if they had to do it themselves. None of it seems possible to them.

But maybe most kids were the same when I was that age. I was too busy programming and modelling or animating in 3D Studio Max to know what was normal.

The original is at https://informationisbeautiful.net/visualizations/most-commo...

With a link to a great data story that is easy to miss:

https://www.datagenetics.com/blog/september32012/index.html

PINs, not PIN numbers. The N in PIN stands for number.

This is an instance of RAS syndrome: https://en.wikipedia.org/wiki/RAS_syndrome

Someone tell The Los Angeles Angels.

I think they’re over in line behind “The La Brea Tar Pits”

I always use my PIN number at the ATM machine.

Great link. I love it that RAS Syndrome is an example of itself.

I think a very relevant part of the article is “A limited amount of redundancy can improve the effectiveness of communication”

The prevalence of “PIN number” suggests it’s a useful redundancy.

RAS 'syndrome' is just an example of redundancy in language, which is often actually useful for communication. There's no reason to insist on avoiding it.

Interesting graph, but I find it strange there are these really unpopular numbers like 0738. I can't see the reason why it would be significantly less popular than similar ones, i.e. 0739 or 0758

I think people are biased towards PINs with only cardinal directions + 45 degree diagonals - or in other words the angles traced out by the digits should always be a 45 degree multiple.

I want to know why the hate for 0675.

I never got why 4 digit PINs were so common. Not only does requiring more digits make it harder to guess by brute-force, it also prevents people from making frankly stupid PINs like the date of their birth year.

Even at 8 digits people could still use their birthdays. I think there's a tradeoff between PIN size and fraction of the population that will feel comfortable picking a number with no significance. I'd speculate that in a world where every PIN has to be 16 digits that almost everyone would just use 2 or 4 concatenated dates.

That's why you need an odd number. ie 5. Or 7 for higher security.

Most of the time they do the trick (when rate limited). Even using a birthday will still stop card thieves from emptying your bank account at an ATM.

I'd hazard a guess that asking for an 8 digit pin will see lots of people just repeat the first 4 digits again.

Is that a problem that needs solving? Most interfaces for entering a user-generated PIN, like an ATM, are heavily monitored and rate limited. It's not like backend databases are routinely encrypted with these.

As others have said, increasing the length would do little to increase security in most cases since the usual response will be to repeat digits. Plus the current system seems to be working pretty well empirically.

This reminds of the password rotation policies that some companies insist on using, despite the evidence that they are a waste of time. In practice they are an "Increment the last digit of your password" policy.