Path: ...!weretis.net!feeder8.news.weretis.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: candycanearter07 <candycanearter07@candycanearter07.nomail.afraid>
Newsgroups: comp.misc
Subject: Re: Password not strong enough
Date: Thu, 6 Jun 2024 21:55:03 -0000 (UTC)
Organization: the-candyden-of-code
Lines: 28
Message-ID: <slrnv64boo.10ab.candycanearter07@candydeb.host.invalid>
References: <lca3qeFjp85U1@mid.individual.net>
 <DF%7O.36181$Inzb.36166@fx13.iad>
Injection-Date: Thu, 06 Jun 2024 23:55:03 +0200 (CEST)
Injection-Info: dont-email.me; posting-host="05bbcfc41faf73e2d63285a644a3e7f6";
	logging-data="1784792"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX1+RucGUdvISjVX8FDQdpyJRRZuln0II8qPsmoKQtQlKEg=="
User-Agent: slrn/1.0.3 (Linux)
Cancel-Lock: sha1:PNwlj4oMOVXcc53PlNUBtPOWm2M=
X-Face: b{dPmN&%4|lEo,wUO\"KLEOu5N_br(N2Yuc5/qcR5i>9-!^e\.Tw9?/m0}/~:UOM:Zf]%
 b+ V4R8q|QiU/R8\|G\WpC`-s?=)\fbtNc&=/a3a)r7xbRI]Vl)r<%PTriJ3pGpl_/B6!8pe\btzx
 `~R! r3.0#lHRE+^Gro0[cjsban'vZ#j7,?I/tHk{s=TFJ:H?~=]`O*~3ZX`qik`b:.gVIc-[$t/e
 ZrQsWJ >|l^I_[pbsIqwoz.WGA]<D
Bytes: 2469

Scott Alfter <scott@alfter.diespammersdie.us> wrote at 15:40 this Wednesday (GMT):
> In article <lca3qeFjp85U1@mid.individual.net>,
> Sylvia Else  <sylvia@email.invalid> wrote:
>>LFPUxS5a2b3LWr1qt2RS
>>
>>Password not strong enough.
>>
>>Ye Gods! How strong do you want it to be?
>
> KeePassXC says that password has about 108 bits of entropy.  It
> characterizes the password quality as "excellent."
>
> As noted by others, it's probably some bullshit "password complexity"
> requirement that you include some additional character types.  I ordinarily
> have KeePassXC generate passwords similar to what you were trying to use,
> but with look-alike characters excluded (no I, l, 1, O, 0, etc.).  With a
> length of 20 or more characters, you're nearly always going to get a
> stronger password than some site that requires you to choose from all
> available characters...and then imposes a password-length limit.  (The only
> reason I can see for a length limit is that they're storing plaintext
> passwords in their database, which is the textbook definition of "doing it
> wrong.")


Maybe it's to prevent you from using such a long password that you
forget? Who knows.
-- 
user <candycane> is generated from /dev/urandom