Hacker News Reader

Airlines, too. I recently had to enter an alphanumeric password at or below around 12 characters, I think.

Some companies also add so many requirements to the password that I think it does more harm than good to the entropy of it.

View on HN

I recently was forced to enter a password of not more than 8 characters as part of college applications. I was somewhat flummoxed, because the disposable password I use for applications I want to be able to forget about is nine characters. That is the lowest I have ever seen: I hope that there is noone worse.

Have you try to enter some quote in your password?

http://xkcd.com/327/

For many web services entropy isn't a big deal because they use computationally hard hashing functions and have sensible server-side limits that outright foil brute force attempts.

until their hashes show up on pastebin

Entropy and work factor are basically the same thing, that's why they call it key stretching.

Reply on news.ycombinator.com