News for hackers. Stuff that matters.
Re:One Week After Launching My Startup by coldtea on Friday February 21, 2014 @08:43AM (#7276903)
Any decent password manager can generate passwords of any length to use, and XKCD style phrase passwords are not that safe anyway.
Re:One Week After Launching My Startup by dav- on Friday February 21, 2014 @10:52AM (#7277496)
I'm using Lastpass. I usually generate 48 char passwords.
Re:One Week After Launching My Startup by coldtea on Saturday February 22, 2014 @04:52AM (#7281603)
Isn't that overkill though? It's not like they're practically (as opposed to theoritically) better than 16 char passwords.

Who can force break 16 char passwords (especially with non-alphanumeric chars in)?

Re:One Week After Launching My Startup by dav- on Monday February 24, 2014 @11:00AM (#7291467)
Realistically, I'm not worried about someone brute forcing my password for some one-off site. On the other hand, there's really no technical reason to limit passwords to anything less than 255 characters, so why do it? What if some technological breakthrough enables us to build processors much more powerful than previously thought possible, processors that can easily brute force a 16 character password? Likely? No. Possible? I have no clue, but I'd rather not gamble on it.