Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yep, and that's assuming 8 random bytes from extended ASCII. The other point of the article was that nobody actually makes a password from random characters because words are easier to remember. And I think it's disingenuous to suppose people will enter alt-codes and that nonprintable characters would be allowed, so assuming MENSA-quality users with internal random number generators, we get 95^8 ~= 6.6E15, a clear loss of entropy.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: