Comments on: Password generator

By: Dave

Dave — Mon, 14 Jan 2008 06:52:32 +0000

@James: … read my previous comment.

By: James

James — Fri, 11 Jan 2008 08:45:51 +0000

Hmm, personally now I’d think of making a script that screenscrapes quotationwhatever and just adds those quotes to the dictionary.

Passphrases are a better idea, because they often have punctuation etc.

By: Dave

Dave — Tue, 13 Nov 2007 12:14:28 +0000

@A.M: I agree, but you are basically saying:

* assuming a cracker knows you use quotes to remember your password
* assuming it’s in databases added to ‘dictionary’ (the one I’ve used in the past isn’t)

.. but how is a cracker going to know you use quotes to remember your password? Regardless of what technique you use to remember your password, if you tell it to the world you leave yourself less secure.

This primarily solves users entering weak passwords leaving them open to the ‘brute force attack’, at the same time giving users a password they can remember. More importantly, it gets users thinking a little more about security.

By: A.M

A.M — Mon, 12 Nov 2007 00:43:17 +0000

Good job, Dave.

However, I agree with Danny, this is somehow a weak password.

Why? Because of the limited (they’re relatively not that many) number of quotes (and thus the letter combinations), password generated will be easily susceptible to a “dictionary attack”. That is, simpley, trying all possible quotes.

Still though, I may personally use it for some low-risk accounts. Thanks!

By: Dave

Dave — Fri, 09 Nov 2007 01:40:47 +0000

@Danny: How so?

By: Danny Hope

Danny Hope — Fri, 09 Nov 2007 00:36:08 +0000

Isn’t this a really weak kind of password though?

By: Amit

Amit — Mon, 29 Oct 2007 19:14:29 +0000

great work Dave!