Podcast #128: We chat with Kent C Dodds about why he loves React and discuss what life was like in the dark days before Git. Listen now.
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
Status closed:yes
Types is:question
Exclude -[tag]
For more details on advanced search visit our help page
Results tagged with Search options user 655

A set of requirements regarding password creation, storage, and usage. These requirements often constrain several characteristics of passwords. So, a password policy is a set of rules designed to enhance computer security by encouraging users to employ strong passwords and use them properly.

No, the order in the second password is NOT "more random". Randomness is not in the password itself, but in the way the password is generated; it does not relate to what the password is, but to what i …
answered Aug 12 '14 by Thomas Pornin
Why do you have a password policy in the first place ? It is to avoid passwords which are "too weak" (in the sense of: "too easily guessed"). Do weak passwords suddenly cease to matter on the Web site …
answered Oct 12 '11 by Thomas Pornin
If the connection string can be generated from the license key, then I suppose that each customer will have his own license key, resulting in a distinct per-customer connection string... so you are ba …
answered Feb 11 '13 by Thomas Pornin
To remember passwords, type them often. You can remember dozens of passwords if you type them daily -- that's muscle memory, the same kind which is used by martial arts practitioners, so remembering m …
answered Oct 14 '12 by Thomas Pornin
There are two levels of strength here: Whether the provided password will be, by itself, strong (against brute force). Whether someone learning one of your passwords on one site will gain leverage f …
answered Oct 24 '13 by Thomas Pornin
With mathematics: Suppose there are n possible passwords. Password number i has probability pi of being selected. It is assumed that the attacker knows the exact values of the pi and tries them in du …
answered Aug 22 '12 by Thomas Pornin
Unix passwords, with the old DES-based crypt() function, were limited to 8 characters (and the high bit of each byte was ignored). Thus, a lower limit of more than 8 characters would simply not have w …
answered Dec 16 '13 by Thomas Pornin
A PIN is just a password -- a password which is restricted to digits and constrained in size, but a password nonetheless. PIN make sense in contexts where digits are natural, namely ATM systems and ot …
answered Oct 3 '12 by Thomas Pornin
It is not bad to leave passwords live long. However, some people consider that password renewal is important and improves security. In all honesty, I am a bit at a loss when it comes to understanding …
answered Sep 24 '12 by Thomas Pornin
The theory is that you would like to run the same tools as the attacker. The attacker will run a list of "probable passwords" based on what he knows or guesses of the psychology of the users. John the …
answered Feb 1 '13 by Thomas Pornin
Part of it is a jerk reflex -- password reuse is forbidden because otherwise users can easily work around policies that force regular password changes. Not that forcing password changes really improve …
answered Mar 31 '16 by Thomas Pornin
Who is responsible is who will get the blame. It is a policy decision, so it can be "anybody". However, bad decisions can happen. Here is some food for thought: Developers themselves must not be res …
answered Nov 1 '12 by Thomas Pornin
One basic answer is that a password with 60 bits of entropy is enough -- that's about ten alphanumeric characters (chosen randomly, independently and uniformly, please). For such a password to be prac …
answered Dec 27 '12 by Thomas Pornin
"Reading aloud" is about enunciating a sequence of "phonetic symbols" in due sequence. You want these symbols to be unambiguous when pronounced. It so happens that we humans have such a system: it is …
answered Aug 7 '13 by Thomas Pornin
For n-character passwords without two identical adjacent characters, @Stephen gives the solution: that's 94*93n-1 passwords. Reasoning is simple: you are free to use any of the 94 characters for the f …
answered Apr 8 '14 by Thomas Pornin

15 30 50 per page