this post was submitted on 13 Dec 2023
926 points (97.8% liked)

Technology

59143 readers
2264 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
926
Google Promises Unlimited Cloud Storage; Then Cancels Plan; Then Tells Journalist His Life’s Work Will Be Deleted Without Enough Time To Transfer The Data (www.techdirt.com)
submitted 10 months ago by [email protected] to c/[email protected]
167 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 7 points 10 months ago (1 children)

Limiting the length of a password (at least to something as low as 16 characters) sounds like an unnecessary, bad idea...

[–] [email protected] 4 points 10 months ago (1 children)

Placing any restrictions at all on what makes a valid password is an unnecessary, bad idea.

[–] [email protected] 1 points 10 months ago* (last edited 10 months ago) (1 children)

I think I agree, but short passwords like "x", "69", "420", "abcd", "12345" etc. would take a very short time to brute-force... Is your take that even if these are allowed, it will make all other passwords of the site more secure, since it adds more possibilities to the list where nothing can be disregarded when trying to brute-force any other password?

[–] [email protected] 2 points 10 months ago

Yes that's exactly it. When you reduce the total space of possible passwords you are giving a brute force attack unnecessary hints to improve their attempts with. A weak password will always be a weak password, so single digits or obvious or popular patterns should be avoided, but this should be a matter of user education rather than a hard and fast rule for account creation.