Replies

@manton Surprising! Maybe the threshold has changed since that time. Or caching as standard?

@oyam I thought more along the lines of a rotational, not permanently assigned, rule set or recipe. Keep changing the recipe and explicitly tell that recipe each time, so that visitors do not know which user has which recipe. They could make it more complex, simply: 2 symbols this time, 1 symbol next, for example.

It would force the brute force hackers to use the most complex search and waste a lot of time.

@oyam Hmm... have m/any sites used a per user decision on password rules? user1 gets to use symbols and letters but not numbers; user7 gets to use numbers and letters but not symbols; etc. How would that affect expected entropy?

Blog post reply to a blog post and connected in conversation -- essentially micro.blog's premise.

@40Tech Yes, TextExpander (Did you mean snippets v. passwords?)

Yeah, that makes the application a shell of its former self if it only works when you log in to its internet sync. Nope. Nope. Nope. Not gonna.