logoalt Hacker News

LoganDarktoday at 4:50 PM1 replyview on HN

RustDesk should fix their password requirements: https://github.com/rustdesk/rustdesk/discussions/2888


Replies

applfanboysbgontoday at 5:13 PM

It's open-source, so just build it yourself with the tiny change. Something this trivial could be done with a 30 second prompt at this point, so there's not even an excuse of "too much effort".

I will note that the XKCD password scheme being proposed there is, in fact, completely insecure. A modern consumer GPU can crack "four random English words" in a day. You can argue that it's the user's choice to be allowed to use insecure passwords, but arguing that that scheme is actually secure is just wrong.

show 4 replies