News for hackers. Stuff that matters.
Re:Passphrases You Can Memorize That Even the NSA Can’t Guess by salibhai on Friday March 27, 2015 @12:09PM (#9277110)
This is actually pretty cool.

From the article: Not too bad for a passphrase like “bolt vat frisky fob land hazy rigid,” which is entirely possible for most people to memorize. Compare that to “d07;oj7MgLz’%v,” a random password that contains slightly less entropy than the seven-word Diceware passphrase but is significantly more difficult to memorize.

At one trillion guesses per second — per Edward Snowden’s January 2013 warning — it would take an average of 27 million years to guess this passphrase.

Re:Passphrases You Can Memorize That Even the NSA Can’t Guess by TheLoneWolfling on Friday March 27, 2015 @01:09PM (#9277579)
The other advantage? It's generally faster /easier for someone to type something like "bolt vat frisky fob land hazy rigid" than "d07;oj7MgLz`%v,". At least it is for me.
Re:Passphrases You Can Memorize That Even the NSA Can’t Guess by garrettr_ on Friday March 27, 2015 @01:16PM (#9277634)
It's easier on keyboards (since we spend most of our time typing lowercase letters as part of text) and also on mobile (since you don't need to do annoying and error-prone context switching for capital letters or symbols).

I think this is one of the greatest unspoken benefits of Diceware-style passphrases!

Re:Passphrases You Can Memorize That Even the NSA Can’t Guess by digitalpacman on Friday March 27, 2015 @06:31PM (#9279474)
I actually can remember a password like the d07 one easier because of keyboard pattern matching. That's how I generate passwords is I draw patterns on the keyboard. It's so unpopular that nobody creates tables for keyboard patterns entries.
Re:Passphrases You Can Memorize That Even the NSA Can’t Guess by beltorak on Sunday March 29, 2015 @08:54PM (#9287136)
I created an account just for you....

https://github.com/Rich5/Keyboard-Walk-Generators

Re:Passphrases You Can Memorize That Even the NSA Can’t Guess by srathi on Friday March 27, 2015 @02:18PM (#9278102)
Is the one trillion guesses per second with or without the key-stretching (hashing the master password N number of times)?