Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

". . . . . ." is a good password #39

Closed
bukzor opened this issue Mar 24, 2014 · 9 comments
Closed

". . . . . ." is a good password #39

bukzor opened this issue Mar 24, 2014 · 9 comments

Comments

@bukzor
Copy link

bukzor commented Mar 24, 2014

It seems like the "repeat" strategy should apply to multiple-character runs.

@analytically
Copy link

+1

@mgifford
Copy link

mgifford commented Apr 3, 2014

This makes sense to me. Are other pattern checks useful like /././././././.

@TheChown
Copy link

It might also be worthy of note that
.--. .- ... ... .-- --- .-. -..
represents the word "password" in morse code. (and perhaps mistakenly reports a crack time (seconds): 1.2393165958871756e+35).
I felt that this was worth mentioning for the sole fact that if symbol pattern substitution (from a alphanumeric domain into a multi symbol range) can be identified, not only can OP's ". . . . . ." be detected as a insecure, but any basic stenography can also be detected.

@JulioPotier
Copy link

  ²  ²

(space space square space space square)
is also a 6 chars, "strong" password.
2 repeated patterns containing 2 repeated chars.

@tracker1
Copy link

@BoiteAWeb makes me think that maybe a trim should be done before checking.. (I tend to trim any password inputs in case of extra characters with copy/paste.

@JulioPotier
Copy link

nono, never trim a password, i can decide to start my password with a space, this is not forbidden.

@tracker1
Copy link

@BoiteAWeb given how many times copy/paste includes extra leading/trailing whitespace and the resulting error, and confusion... it's probably better to not allow it... maybe not in this tool, but in practice... imho.

@stramel
Copy link

stramel commented May 16, 2015

I agree with @BoiteAWeb.

@lowe
Copy link
Collaborator

lowe commented Sep 14, 2015

as of 3.5.0, '. . . . . .' is no longer a good password! the new implementation of repeat_match catches multi-character repeat sequences.

@lowe lowe closed this as completed Sep 14, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

8 participants