Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You could probably throw out 90% or more of dictionary words for your permutations, I'd say that is significant enough to paint a target on your back.


If your password is derived from a four word phrase (per the XKCD formula, which isn’t the only one), potentially all of the individual words could be inoffensive in isolation. There’s no obvious way to operationalize the human intuition of offense in a way that restricts the search space if you’re smart about it.


It all depends on if you have anything worth cracking. Sure, if your average hn reader encrypts a password db with a dirty four word phrase, that reader will be fine because no one is willing to rub two pennies together to crack that.

On the other hand if you're protecting secrets actually worth something...


Hey, for all you know I might find certain seemingly random 128-character alphanumeric strings very offensive ;)


Seemingly random isn't random.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: