pedro_a · HackerTrans

vor 15 Jahrendiscuss

Randall is saying exactly that: Through 20 years of effort, we've successfully trained everyone to use passwords that are hard for humans to remember, but easy for computers to guess

pedro_a

vor 15 Jahrendiscuss

Case is only 8 more bits assuming you randomly assign case to all of your letters. More likely it will be only one more bit. Then requiring an extra character is equally good.

pedro_a

vor 15 Jahrendiscuss

Assuming there are 1024 languages in the world you added 10 bits of entropy. That can be achieved adding an extra common word.

pedro_a

vor 15 Jahrendiscuss

>Jargon helps too, and proper names. "dijkstra bicycle entonces boojum daihinmin"

Instead of that, just add an extra common word: "correct horse battery staple bicycle".

pedro_a

vor 15 Jahrendiscuss

You can modify slightly your sentence without loosing entropy

"married greatly snake battle" becomes "a married great snake will battle".

"correct horse battery staple" becomes "correctly the horse inserted the battery staple"

Note that the extra words add little or no entropy, at the cost of increased length.

pedro_a

vor 15 Jahrendiscuss

Which is exactly the sort of terrible rules xkcd is criticizing (paraphrasing glenra).

Instead of 4 extra enforcements you could add 8 extra characters.

Your entropy is (somewhat simplified)

One 8 letter word: 15 bits

1 uppercase = 3 bits (or even just 1 bit, people capitalize the first letter)

reversing 2 rules above: 1 bit

replacing two characters at random places: 8*7/2 = 4.8 bits

inserting 2 random non alphabet characters: 40^2 = 10.6 bits Total: 34.4

The entropy of three medium difficulty words is log(4000^3) = 35.9

Instead of memorizing K!ybo4rd it could be mykeyboardisblue.

pedro_a

vor 15 Jahrendiscuss

Then the space would be "the obeisance to the stupid website piece". Note that the entropy of "correct horse battery staple" is only one bit more than "correcthorsebatterystaple".

comments