Skip to main content
Share Your Experience: Take the 2024 Developer Survey

New answers tagged

4 votes

Security of a non-random password but that relies on information an attacker cannot possibly know

Adam's answer is better than this, but I'm going to elaborate on my initial comments anyway: If you think the entropy is 0, I don't think you have understood those other questions you read. Your ...
Michael come lately's user avatar
11 votes

Security of a non-random password but that relies on information an attacker cannot possibly know

The mental disconnect I think you have here is that the strength of the password is different than the strength of the rule used to generate it. You are assuming that because the rule you use to ...
Jared Smith's user avatar
  • 2,106
30 votes
Accepted

Security of a non-random password but that relies on information an attacker cannot possibly know

The only thing "an attacker cannot possibly know" is something nobody knows. Take your example, "the surnames of the first 5 people that I ever fancied". Your password would be ...
Adam Katz's user avatar
  • 11.7k
10 votes

Security of a non-random password but that relies on information an attacker cannot possibly know

Trying to compute the entropy of a password and then evaluating the security of a password scheme based on this, very often results on arguing about the correct method to calculate some entropy while ...
Steffen Ullrich's user avatar

Top 50 recent answers are included