r/mildlyinfuriating • u/King_Baboon • Mar 08 '16

Overdone Fuck it, hackers win.

Post image
14.6k Upvotes

91% Upvoted

992 comments sorted by

View all comments

2.0k

u/buttonstoyou Mar 08 '16

How about I just go to a new website, how about that.

1.6k

u/King_Baboon Mar 08 '16

That's what makes it even more infuriating. This is a government site where I have to take mandatory training.

488

u/[deleted] Mar 08 '16 edited Mar 09 '16

Well there it is. It's a government website. It needs to be secure. Password restrictions have always annoyed me on websites where it's just my shit that going to get fucked. Yes all of these restrictions will make my shit more secure, but if I want my password to be hunter12 then that should be my perogative. But on a government website it makes sense.

Edit: politeness

Edit 2: Jesus fucking Christ I get it. These types of passwords are more susceptible to brute force passwords. I don't need 20 of you motherfuckers to tell me the same damn thing.

151

u/Toribor Mar 08 '16 edited Mar 08 '16

Password strength should be measured by bits of entropy, not arbitrary limitations. These forced limitations actually reduce the amount of possible combinations making brute forcing easier. Also, people are likely to compensate for the difficult restrictions by just writing it down. Maybe not a big deal for a one-off government website, but forcing password restrictions like this for a bank account means someone is just going to write it down on a piece of paper or save it in their phone which makes it that much easier for someone to get access to it.

15

u/Lifeguard2012 Mar 08 '16

My bank requires a "passphrase" instead of a password. Pretty awesome IMO.

11

u/Foef_Yet_Flalf Mar 08 '16

Something like "I fucked OP's mom while majoring in Environmental Science"? With words and such?