Open Menu
AllLocalCommunitiesAbout
lotide
AllLocalCommunitiesAbout
Login

Please pick a password starting with ad and ending with min

⁨482⁩ ⁨likes⁩

Submitted ⁨⁨2⁩ ⁨years⁩ ago⁩ by ⁨qaz@lemmy.world⁩ to ⁨mildlyinfuriating@lemmy.world⁩

https://lemmy.world/pictrs/image/70fa0c39-ba80-4c30-9918-7d7187ef927d.png

source

Comments

Sort:hotnewtop
  • UpperBroccoli@lemmy.blahaj.zone ⁨2⁩ ⁨years⁩ ago

    English letters? Really? So basically no a-z, only Æ, Þ, Ƿ, Ð?

    source
    • ImplyingImplications@lemmy.ca ⁨2⁩ ⁨years⁩ ago

      Ye olde passwarde

      source
    • fartsparkles@sh.itjust.works ⁨2⁩ ⁨years⁩ ago

      What have the Romans ever done for us?

      source
      • Spot@startrek.website ⁨2⁩ ⁨years⁩ ago

        Roads?

        source
        • -> View More Comments
    • egrets@lemmy.world ⁨2⁩ ⁨years⁩ ago

      Also Œ, Ȝ, and arguably W and U.

      source
      • drolex@sopuli.xyz ⁨2⁩ ⁨years⁩ ago

        Anglo-saxons got the UWU, nice

        source
    • Carighan@lemmy.world ⁨2⁩ ⁨years⁩ ago

      Would ë qualify?

      source
    • jwt@programming.dev ⁨2⁩ ⁨years⁩ ago

      English letters

      U_w0t_M8

      source
  • Eiri@lemmy.world ⁨2⁩ ⁨years⁩ ago

    You remind me of my bank about 17 years ago. Everyone had to have a 10-character password, exactly, and it had to include exactly 2 numbers and 1 symbol. I wasn’t very knowledgeable about computers at the time and it already felt dumb.

    source
    • Wogi@lemmy.world ⁨2⁩ ⁨years⁩ ago

      A few years ago my ISP pushed an update to my router that changed the password requirements, invalidating my passwords. Because I couldn’t enter the old password I also couldn’t change the password. I had to do a factory reset.

      source
      • JackbyDev@programming.dev ⁨2⁩ ⁨years⁩ ago

        Feels odd to check the password requirements on the enter password screen in addition to the new password screen.

        source
        • -> View More Comments
      • Eiri@lemmy.world ⁨2⁩ ⁨years⁩ ago

        Wow that’s a big oops

        source
      • Glitterbomb@lemmy.world ⁨2⁩ ⁨years⁩ ago

        ISP worker here. Our chosen routers default to an 8 digit password, the first 4 are the last 4 of the mac in hex, which anyone can easily see being broadcast by the wifi network. The last 4 are a part of a unique serial number, but its just 0-9. Ultimately, if you try to brute force this default password, you need 10000 tries. It takes a regular GPU 2 minutes with hashcat. It baffles my mind that companies think this is OK.

        source
    • ByteOnBikes@slrpnk.net ⁨2⁩ ⁨years⁩ ago

      17 years ago, jeez. My credit Union’s website is like that. Only its between 8-12 characters. No more, no less.

      It’s terrifying.

      source
    • RecluseRamble@lemmy.dbzer0.com ⁨2⁩ ⁨years⁩ ago

      At that time my bank allowed up to 6 digits as a password. I kid you not, like a card PIN but for online banking login. I believe the whole banking security relies on their backoffices still running on paper.

      source
      • Eiri@lemmy.world ⁨2⁩ ⁨years⁩ ago

        That’s what my current bank uses for the web portal now to think of it. Client number, and 6-number PIN. I guess they’re only doing this because they really trust their “unusual activity” protocols, but I’ve got a feeling they really shouldn’t only rely on those.

        source
  • 9point6@lemmy.world ⁨2⁩ ⁨years⁩ ago

    underlines

    source
    • gratux@lemmy.blahaj.zone ⁨2⁩ ⁨years⁩ ago

      german programmers trying to translate Unterstrich

      source
      • humorlessrepost@lemmy.world ⁨2⁩ ⁨years⁩ ago

        My unterstrich is chafed.

        source
    • dohpaz42@lemmy.world ⁨2⁩ ⁨years⁩ ago

      /^\w{6,16}$/

      source
    • yamanii@lemmy.world ⁨2⁩ ⁨years⁩ ago

      Those cases where an english word gets absorbed even though no one from the origin talks like that. It’s also informally called underline here lol.

      source
  • guy_threepwood@lemmy.world ⁨2⁩ ⁨years⁩ ago

    I had one of those “fancy” Vodafone routers included with my broadband which had a stupid rule set on choosing the WiFi password. It’s my network, not yours, stupid router. It can be as insecure as I want.

    Anyway the rules were enforced by the JavaScript so it was easy to bypass until I got my own router to replace it with.

    source
    • infeeeee@lemm.ee ⁨2⁩ ⁨years⁩ ago

      It’s important to note, that these things are designed for the average user. If you want to change the wifi password, you are by far not an average user. Most users just plugs in and never even think about that, and the number of that kind of users are several order of magnitude higher than the conscious ones. For them it’s much more secure to set a random pw. If you let them select a password they will choose 12345 or password.

      If you know what you are doing usually it’s better to buy your own router where you can change everything the way you like.

      source
      • JackbyDev@programming.dev ⁨2⁩ ⁨years⁩ ago

        If we could magically get the data I’d be willing to bet at least half of everyone thinks they can’t change their router password.

        source
  • Machefi@lemm.ee ⁨2⁩ ⁨years⁩ ago

    Assuming we can use both lower- and uppercase letters (52 in total), with the ten digits and the underscore that gives us 63 characters to work with. A random 16-character combination of these gives us 95 bits of entropy (rounding down), which is secure enough by modern standards, at least for a home router.

    Regardless, I understand the frustration of arbitrary limitations preventing you from choosing a secure password in a way that you’re comfortable with.

    source
  • possiblylinux127@lemmy.zip ⁨2⁩ ⁨years⁩ ago

    Create a randomly generated password and store it in a password manager

    source
  • peter@lemmy.emerald.show ⁨2⁩ ⁨years⁩ ago

    I hate that kind of stuff, when I see this I wonder if they hash the password at all

    source
  • rekabis@lemmy.ca ⁨2⁩ ⁨years⁩ ago

    16 characters was the minimum length a password should be due to how easy it was to crack… something like ten years ago.

    Now it’s something like 20 to 24 characters.

    Seriously, if your company is defining maximum password length and demanding specific content, it is failing at the security game. Have the storage location accept a UTF-8 string of at least 2048 bytes - or nvarchar(max) if it’s a database field - and do a bitwise complexity calculation as your only “minimum value” requirement.

    Look at how KeePass calculates password complexity, and replicate that for whatever interface you are using. Ensure that it is reasonable, such as 150-200bit complexity, and let users choose whatever they want to achieve that complexity.

    source
    • Jyek@sh.itjust.works ⁨2⁩ ⁨years⁩ ago

      It’s TPLink. Budget networking equipment comes with budget security principles.

      source
  • Carighan@lemmy.world ⁨2⁩ ⁨years⁩ ago

    Just do the Password Game to figure out a good one!

    source
  • Blaster_M@lemmy.world ⁨2⁩ ⁨years⁩ ago

    TP-Link… TP-Link…

    I don’t trust your bottom barrel software, TP-Link…

    source
  • const_void@lemmy.ml ⁨2⁩ ⁨years⁩ ago

    Lol. Imagine thinking TP Link takes security seriously.

    source
  • doggle@lemmy.dbzer0.com ⁨2⁩ ⁨years⁩ ago

    admin wouldn’t even work. It’s too short.

    source
    • Agret@lemmy.world ⁨2⁩ ⁨years⁩ ago

      Username admin
      Password password

      As is tradition

      source
      • Blisterexe@lemmy.zip ⁨2⁩ ⁨years⁩ ago

        Like my router that defaulted to

        Root

        Root

        source
        • -> View More Comments
    • mxcory@lemmy.blahaj.zone ⁨2⁩ ⁨years⁩ ago

      “adimin”

      source
  • bjoern_tantau@swg-empire.de ⁨2⁩ ⁨years⁩ ago

    Take a string as bytes is bad with weird non-ASCII characters. Been there, been bitten in the ass by it.

    At least with e-mail clients different clients on different operating systems use different encoding by default for their passwords.

    With a router I could imagine different client apps following different standards.

    source
    • expr@programming.dev ⁨2⁩ ⁨years⁩ ago

      You don’t have to take arbitrary bytes. UTF-8 encoded strings are just fine and easily handled by libraries.

      source
      • bjoern_tantau@swg-empire.de ⁨2⁩ ⁨years⁩ ago

        At least with e-mail clients different clients on different operating systems use different encoding by default for their passwords.

        source
        • -> View More Comments
  • Mwa@thelemmy.club ⁨2⁩ ⁨years⁩ ago

    I HATE THIS SOO MUCH AHHHHH

    source
  • superkret@feddit.org ⁨2⁩ ⁨years⁩ ago

    add1more_Dopamin

    source
  • abfarid@startrek.website ⁨2⁩ ⁨years⁩ ago

    Adrenamin™

    source