Hacker News Reader

Comment by jackcodes | Hacker News Reader

<month><animal><current_year> every 90 days is the god pattern

A better pattern is something long that will exceed the bounds of a rainbow table.

    I love JavaScript but I really wish it didn't have the ASI feature*

The example is 67 characters long written in a statement that is easy to remember with two non-alpha characters aside from the spaces. Imagine the size of rainbow table it would take to crack that.

I'm not sure how easy that is to remember... Was it 'really love but wish' or 'love but really wish'? etc.

I suspect you would word your password in a way that is most familiar for you. The idea is to achieve both cognitive comfort while destroying brute force efforts. A better example:

    Antidisestablishmentarianism is the longest English word I can think of##

73 characters.

I think you'd have more fun trying to imagine phrases no one would ever say.

"But thankfully I took Kim Kardashian's advice, and everything worked out for the best."

I enter my password so many times each day (every time I step away from my computer and then come back to it, for example), so having such a long password would be quite the annoyance. Plus it's easy to make a typo and not realize it in a long sentence when you can't see what you're typing.

If I crack one of your passwords (or search your email on haveibeenpwned), and assuming you haven't changed your animal, then cracking any other password you have is trivial and takes at most 12 permutations.

I know at least one company that prohibits several ways to write any month or year like value in its password field. I think the animal might make it through as long as it doesn't have any shortened month name or repeating letters as sub string. I have found several creative ways to write new passwords for that login and am still annoyed when it randomly matches with "information from my profile".

Let me guess... animal is always "dragon"?

Reply on news.ycombinator.com