Subject:
|
Re: Automated password appraisal (Re: New feature: Article rating)
|
Newsgroups:
|
lugnet.admin.general
|
Date:
|
Thu, 30 Mar 2000 23:32:30 GMT
|
Highlighted:
|
(details)
|
Viewed:
|
3897 times
|
| |
|
|
In lugnet.admin.general, Richard Franks writes:
> It really likes: fnark-5- (345%)
> but hates: fnark-5-lego (-104%)
>
> Surely that's squiffy? Or is it based on the theory that being able to guess
> the 'lego' part will make the 'fnark-5-' more obvious?
It's a side-effect of downrating fluffy portions even though they don't hurt.
That is, if you have a wicked strong 8-character pw (call it "X" for short),
then even though "Xlego" is no worse than "X", it takes points off for the
fluffy part ("lego"). Taking points off for that is a good thing to do when
the fluff serves only to artificially grow the size of the pw, but it's not
particularly helpful on pw's that are already long enough.
The simple answer is that this pw evaluator is trying to do more of an overall
randomness check than a pw strength check. Surely "fnark-5-lego" is no weaker
than "fnark-5", but it is significantly less random.
--Todd
|
|
Message has 1 Reply:
Message is in Reply To:
309 Messages in This Thread:
(Inline display suppressed due to large size. Click Dots below to view.)
- Entire Thread on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
This Message and its Replies on One Page:
- Nested:
All | Brief | Compact | Dots
Linear:
All | Brief | Compact
|
|
|
|
