News for hackers. Stuff that matters.
Re:TrueCrypt Security Assessment [pdf] by lucb1e on Monday April 14, 2014 @03:02PM (#7588094)
> Misinterpretation, not bullshit.

Fair enough. I'm still curious about the generation method though: I can imagine that testing all texts ever published takes $200k if you go up to 40 characters, but if you use a unique text it might be different. There are a lot of variables here, including honest misspellings, punctuation use, spacing (non-tech people seem to find spaces weird in passwords), capitalization, usage of names, etc.

Re:TrueCrypt Security Assessment [pdf] by tracker1 on Tuesday April 15, 2014 @07:35AM (#7591278)
Maybe if we start changing the label to "Passwords" or "Pass phrase" to indicate that you can do something more expressive.

It bugs me that even today, more systems (hello banks) don't support more open passwords. Even what's on a US Ascii keyboard would be nice. Two of my banks only support letters and numbers, no special characters and case insensitive.