I agree with @TychoTithonus. UX is the most important, and thanks for recommending zxcvbn as a blacklist since that highlights the UX issue
-
-
Replying to @lakiw @TychoTithonus and
1/n Zxcvbn has multiple blacklists, which ones it uses is complicated since there's rankings and thresholds....
1 reply 0 retweets 0 likes -
Replying to @lakiw @TychoTithonus and
2/n Zxcvbn default blacklists: 100k english words from wikipidia, ~100k names (first + last), 47k common passwords, 39k words from tv & film
1 reply 1 retweet 1 like -
Replying to @lakiw @TychoTithonus and
3/n Zxcvbn checks for mangled variations of its blacklists. Aka could easily be said it has over 300mil blacklist depending on configuration
1 reply 1 retweet 0 likes -
Replying to @lakiw @TychoTithonus and
4/n What I think makes Zxcvbn different from using Troy Hunt's list though is that it attempts to explain why a password was rejected aka UX
1 reply 1 retweet 0 likes -
Replying to @lakiw @TychoTithonus and
5/n Much longer way of saying the disagreement might not be on size of blacklist but the user's experience with the blacklist ;p
2 replies 0 retweets 1 like -
Replying to @lakiw @thorsheim and
:) Put another way: teaching/UX about entire *classes* of bad password scales much better than a huge list of *only* leaked passwords1 reply 0 retweets 1 like -
Replying to @TychoTithonus @lakiw and
Use Chinese. Use Japanese. Use Cyrillic, Greek, Hebrew & Arabic. Use Unicode. Use it all. Choose life. Choose UX. Choose your own password.
2 replies 0 retweets 2 likes -
Replying to @thorsheim @TychoTithonus and
If you think using Japanese or Chinese for passwords is reasonable, you clearly know nothing about how those two languages work.
3 replies 0 retweets 2 likes -
Replying to @marcan42 @thorsheim and
Hint: the sequence of keypresses to type in those languages is unmemorizable and even nondeterministic, thus incompatible w/ password boxes.
2 replies 0 retweets 0 likes
Replying to @marcan42 @thorsheim and
Which is why every Japanese site tells you to use ASCII passwords, because chaos would ensure if they ever tried to actually allow Japanese.
11:12 AM - 8 Aug 2017
0 replies
0 retweets
0 likes
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.