Hector Martin

5/n Much longer way of saying the disagreement might not be on size of blacklist but the user's experience with the blacklist ;p

:) Put another way: teaching/UX about entire *classes* of bad password scales much better than a huge list of *only* leaked passwords

Use Chinese. Use Japanese. Use Cyrillic, Greek, Hebrew & Arabic. Use Unicode. Use it all. Choose life. Choose UX. Choose your own password.

If you think using Japanese or Chinese for passwords is reasonable, you clearly know nothing about how those two languages work.

I’ll admit I don’t know Chinese or Japanese, but I’ve been co-supervising a Chinese PhD student doing pwd research. Does that count?

Have you spoken to him about how passwords work in Chinese? ;)

Him? I’ve seen her type in Chinese passphrases for various sites. Seems to work as far as I can tell. And she’s damn smart too!

In actual Chinese characters, not romanized/pinyin? And without displaying everything on the screen first?