Hacker News Reader

Comment by fbcocq | Hacker News Reader

I've been resetting people's 8 character passwords lost due to Post-Vacation-Insomnia for ages, I'd really like to see them expect me to remember a 50 character password under stress conditions.

View on HN

I have a 12 character password and it is a pain in the ass to type it several times a day. I couldn't imagine using a 50 character password.

It is probably just a concatenated string of his credit card number or social security number and random words. I wonder if they are currently trying to crack it using some kind of dictionary brute force mechanism, or if there is some kind of lock out enabled after five tries.

If they have physical access, then there is no effective lock-out mechanism. Presumably they can determine which encryption software is used, and can use the algorithm as many times as they want.

One way to have long, but memorable passwords is to construct them using the first letter of each word a rather long, but memorable quote/phrase. E.g., The opening of the Gettysburg Address yields: fsasyaofbfutcannciladttptamwce. And if you forget the exact words, you can always look them up.

Did you mean: Post-Vacation-Amnesia?

Yes

Use a pass phrase with correct punctuation:

"I hate the boarder checks that my home country makes me go through each time I return from Europe!"

"border" not "boarder"

unless that was deliberate....

I'd bet it's a pass phrase. The first few lines of a song converted to 3l33t will give you 50 memorable characters pretty easily.

Reply on news.ycombinator.com