Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 502

Specific to the security of passwords: hashing, entropy, cracking, resets, lockouts, etc.

4 votes

What are the weaknesses of this password-generation-method? How can it be improved?

That method isn't cryptographically strong[1], but it looks like plenty to defeat casual database-grabbing attacks like Gawker's. FWIW, there's a survey of web-based password management options on …
user502's user avatar
  • 3,321
17 votes

How reliable is a password strength checker?

You're worried that because the passphrase uses dictionary words, it might be easier to crack than something that must be brute-forced. tl;dr: This is a valid theoretical worry, but right now it's …
user502's user avatar
  • 3,321
8 votes

Is Skype secure enough to transmit passwords?

"A password" is not enough information to determine how it needs to be protected. What resources does the password grant access to, and what level of access? Skype uses reasonably strong encryption …
user502's user avatar
  • 3,321
3 votes

Citations for inadvisability of globally unique password

rox0r makes a good point--one reason there are no authoritative articles talking about the inadvisability of globally unique passwords is that they require combinations of other things which are covered … You don't store user passwords reversibly. …
user502's user avatar
  • 3,321