Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #186153

Re: One-line password generator

From Brian <ad44@cityscape.co.uk>
Newsgroups linux.debian.user
Subject Re: One-line password generator
Date 2017-08-29 21:20 +0200
Message-ID <ujUdk-6Et-21@gated-at.bofh.it> (permalink)
References <ujaau-2MR-13@gated-at.bofh.it> <ujbgd-3uv-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw

On Sun 27 Aug 2017 at 21:12:12 +0200, Thomas Schmitt wrote:

> Brian wrote:
> > I do not have to run faster than the bear, just faster than anyone else.

(Analogies never work. Remind me not to use them again).
 
> According to the article about the successful cracking, it is not so much
> about how fast you are. The bear will not stop when it is done with eating
> those behind you.

Note that the article details the point at which the investigators gave
up on going after what they saw as random passwords. They would never
have got to

 my!only"reason£for$living%is^ebay

no matter how low or high its entropy is. Which is not to say other
techniques would not have caught it. Stamina is at least as important as
speed. The bear will have run out of puff after trying n=10 for brute
force.

Protecting an online login is far more important than second-guessing
how a provider has provisioned their system. A user has no control over
the latter, so why should he put any great thought into comabating the
provider as well as the crackers.

We are mesmorised by the skills of offline crackers. They dazzle us and
blind us to realities. Where is someone saying that
 
 eq8GeKBhVXOTjF0dAyd0

is a splendid password? It wouldn't have a chance of being forced via an
online attack.

> It is rather about not to walk the paths which all the tasty others walk.
> The first found meal tells the bear that there is more food in the same
> direction.

With an offline attack, probably. But where are the people who say that
online is the same as or even similar to offline, Inquiring minds would
like to know why 'thisismySECRETpassword' is a poor login password.

And, even assuming a site such as Ebay with its millions of users loses
its marbles to offline cracking, why think you are first in line for
rampaging? Ok, they have to start somewhere - it might as well be you. :)

-- 
Brian.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-22 17:10 +0200
  Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-22 21:50 +0200
    Re: One-line password generator <tomas@tuxteam.de> - 2017-08-22 22:10 +0200
      Re: One-line password generator John Hasler <jhasler@newsguy.com> - 2017-08-22 22:50 +0200
        Re: One-line password generator Jude DaShiell <jdashiel@panix.com> - 2017-08-23 14:40 +0200
    Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-22 22:20 +0200
      Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-22 22:20 +0200
      Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-22 22:30 +0200
        Re: One-line password generator Glenn English <ghe2001@gmail.com> - 2017-08-23 22:40 +0200
      Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-23 00:40 +0200
        Re: One-line password generator Lck Ras <likcoras@riseup.net> - 2017-08-23 02:30 +0200
          Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-23 19:20 +0200
            Re: One-line password generator Lck Ras <likcoras@riseup.net> - 2017-08-24 03:00 +0200
        Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-23 17:20 +0200
          Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-23 19:00 +0200
            Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-23 20:00 +0200
              Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-23 21:20 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-24 01:10 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-24 19:50 +0200
                Re: One-line password generator David Wright <deblis@lionunicorn.co.uk> - 2017-08-25 03:00 +0200
                Re: One-line password generator Curt <curty@free.fr> - 2017-08-25 10:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-25 11:30 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 15:40 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-25 16:50 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 18:10 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-25 19:20 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 20:10 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-25 20:50 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 21:00 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-25 19:00 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 19:00 +0200
                Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-25 19:20 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-25 20:20 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-25 19:20 +0200
    Re: One-line password generator Jape Person <japers@comcast.net> - 2017-08-22 22:20 +0200
      Re: One-line password generator Jude DaShiell <jdashiel@panix.com> - 2017-08-23 14:40 +0200
    Re: One-line password generator Mike McClain <mike.junk.46@att.net> - 2017-08-23 03:10 +0200
  Re: One-line password generator Teemu Likonen <tlikonen@iki.fi> - 2017-08-23 06:10 +0200
  Re: One-line password generator Aaron Toponce <aaron.toponce@gmail.com> - 2017-08-23 21:20 +0200
    Re: One-line password generator Greg Wooledge <wooledg@eeg.ccf.org> - 2017-08-23 21:30 +0200
      Re: One-line password generator Aaron Toponce <aaron.toponce@gmail.com> - 2017-08-23 21:40 +0200
        Re: One-line password generator Fungi4All <fungilife@protonmail.com> - 2017-08-23 22:50 +0200
          Re: One-line password generator Terence <terence.john@gmail.com> - 2017-08-23 23:40 +0200
  Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-26 20:30 +0200
    Re: One-line password generator Nicolas George <george@nsup.org> - 2017-08-26 20:40 +0200
      Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-26 21:10 +0200
        Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-27 16:00 +0200
    Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-26 21:20 +0200
      Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-27 16:00 +0200
        Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-27 17:10 +0200
          Re: One-line password generator Curt <curty@free.fr> - 2017-08-27 20:10 +0200
          Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-27 20:10 +0200
            Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-27 21:10 +0200
              Re: One-line password generator Andy Smith <andy@strugglers.net> - 2017-08-28 00:00 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-28 09:40 +0200
                Re: One-line password generator Curt <curty@free.fr> - 2017-08-28 11:40 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-28 12:10 +0200
                Re: One-line password generator Andy Smith <andy@strugglers.net> - 2017-08-28 13:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-28 15:20 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-29 04:40 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-29 09:10 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-29 10:50 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-29 11:00 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-29 12:50 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-29 13:00 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-29 14:30 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-30 03:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 12:40 +0200
                Re: One-line password generator Andy Smith <andy@strugglers.net> - 2017-08-29 14:10 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-29 15:00 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-30 03:50 +0200
                Re: One-line password generator Greg Wooledge <wooledg@eeg.ccf.org> - 2017-08-30 14:20 +0200
                Re: One-line password generator Gene Heskett <gheskett@shentel.net> - 2017-08-30 14:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 15:20 +0200
                Re: One-line password generator Gene Heskett <gheskett@shentel.net> - 2017-08-30 15:30 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 15:50 +0200
                Re: One-line password generator Gene Heskett <gheskett@shentel.net> - 2017-08-30 16:00 +0200
                Re: One-line password generator Greg Wooledge <wooledg@eeg.ccf.org> - 2017-08-30 16:10 +0200
                Re: One-line password generator Gene Heskett <gheskett@shentel.net> - 2017-08-30 18:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 16:30 +0200
                Re: One-line password generator Gene Heskett <gheskett@shentel.net> - 2017-08-30 20:10 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 23:00 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-09-01 10:40 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-09-01 10:50 +0200
                Re: One-line password generator Curt <curty@free.fr> - 2017-08-30 16:30 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 17:00 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-30 20:00 +0200
                Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-08-29 11:00 +0200
            Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-27 21:20 +0200
              Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-29 21:20 +0200
                Re: One-line password generator Reco <recoverym4n@gmail.com> - 2017-08-29 21:40 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-29 22:00 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-29 23:00 +0200
                Re: One-line password generator Curt <curty@free.fr> - 2017-08-30 10:50 +0200
                Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-08-30 12:40 +0200
                Re: One-line password generator Reco <recoverym4n@gmail.com> - 2017-08-30 00:00 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-31 21:10 +0200
                Re: One-line password generator Fungi4All <fungilife@protonmail.com> - 2017-08-31 21:20 +0200
                Re: One-line password generator Reco <recoverym4n@gmail.com> - 2017-08-31 21:40 +0200
    Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-27 04:20 +0200
      Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-08-27 16:00 +0200
        Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-08-27 16:40 +0200
  Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-09-01 17:00 +0200
    Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-09-01 21:50 +0200
      Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-09-01 23:50 +0200
        Re: One-line password generator Jude DaShiell <jdashiel@panix.com> - 2017-09-02 11:50 +0200
          Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-09-02 13:00 +0200
            Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-09-02 19:20 +0200
              Re: One-line password generator Jude DaShiell <jdashiel@panix.com> - 2017-09-02 20:30 +0200
              Re: One-line password generator "Thomas Schmitt" <scdbackup@gmx.net> - 2017-09-02 21:00 +0200
                Re: One-line password generator Brian <ad44@cityscape.co.uk> - 2017-09-02 22:00 +0200
      Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-09-02 01:50 +0200
    Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-09-02 01:50 +0200
      Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-09-02 04:40 +0200
        Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-09-02 05:40 +0200
          Re: One-line password generator Mario Castelán Castro <marioxcc.MT@yandex.com> - 2017-09-02 16:40 +0200
            Re: One-line password generator Zenaan Harkness <zenaan@freedbms.net> - 2017-09-04 01:10 +0200

csiph-web