logoalt Hacker News

strbeanyesterday at 6:02 PM2 repliesview on HN

The user in question might have their own personal format that doesn't meet the RustDesk constraints. E.g. they may not use capitals, but use `word1$word2&word3@word4`.

Tayloring your format to the requirements of each site is a step towards defeating the utility of the system; now the user needs to remember some arbitrary hard-to-remember details for each password.

Although having a standard format for your passphrases across sites removes some of the advantages over just using the exact xkdc format (when one of your passwords is compromised and attackers can guess your custom format elsewhere now)...


Replies

throwaway27448yesterday at 6:24 PM

This is a non-issue with a password manager

XorNotyesterday at 9:43 PM

"Look up - there's 7 polywaffles in the sky!"

That phrase will pass almost every single password requirement, and no one is going to crack it by brute force dictionary attack.