Remove my password from lists so hackers won't be able to hack me

https://github.com/danielmiessler/SecLists/pull/155

by dEnigma • 9 years ago

504 69 9 years ago

reificator10• 9 years ago

Look, we all intuitively get that it's a bad idea and it is definitely funny. But honestly is it helping to make fun of the poor user rather than educate them as to why their password is on the list and the importance of secure password practices?

The security community I grew up with was welcoming and understanding, and it sparked an interest I never would have realized otherwise.

badosu• 9 years ago

But honestly is it helping to make fun of the poor user rather than educate them as to why their password is on the list and the importance of secure password practices?

I am not sure the issue poster really uses that password...

reificator10• 9 years ago

Poe's law applies here of course, that's fair. Still...

throwaway2016a• 9 years ago

The user has a large number of GitHub commits and the technical knowledge needed to create a pull request probably exceeds the knowledge needed to know why this doesn't work...

I feel comfortable assuming the original PR is a joke.

reificator10• 9 years ago

the technical knowledge needed to create a pull request probably exceeds the knowledge needed to know why this doesn't work...

The plural of anecdote is not data, but I have first hand experience with someone who can make a pull request but doesn't understand password best practices at all.

Granted it might be because I taught them to make pull requests, but still...

I know people who wrote code for their thesis in Python but can't grasp why indentation matters. You'd be surprised by what people do and don't know.

icc972• 9 years ago

As further evidence that the assafnativ probably understands trolling, it's worth mentioning that he wrote the article The Making of the Kosher Phone [0]. So he knows how to troll Orthodox Jews if nothing else.

[0] http://blog.assafnativ.com/2014/03/the-making-of-kosher-phon...

juandazapata• 9 years ago

It looks like you didn't get the joke.

CPLX• 9 years ago

The security community I grew up with was welcoming and understanding

lol

petecooper• 9 years ago

Ctrl + F

hunter2

(4 matches)

I love a good in-joke.

Spoilers: http://bash.org/?244321

jagjotsingh• 9 years ago

I am wheezing

reificator10• 9 years ago

What did you search for? When you type hunter2 all I see are stars.

Beltiras• 9 years ago

Copied the stars and then pasted that into CTRL-F

katastic• 9 years ago

Does it work for usernames?

Here, check mine:

    8ftpenissurvivor

What does that show up as?

JohnTHaller• 9 years ago

Wouldn't searching for * * * * * * * yield more than 4 matches?

EGreg2• 9 years ago

Whenever you type that, all I see is "1-7-3-4-6-7-3-2-1-4-7-6-Charlie-3-2-7-8-9-7-7-7-6-4-3-Tango-7-3-2-Victor-7-3-1-1-7-8-8-8-7-3-2-4-7-6-7-8-9-7-6-4-3-7-6

pzxc• 9 years ago

I can't see this without claiming the nerd cred of being the first to identify it as the password Data uses to lock out the computer in the ST:TNG episode "Brothers".

For extra credit, I will point out (which you may not know EGreg?) that the password he speaks verbally, and the password that appears on the display visually, are NOT the same and differ by a few digits near the end, a small mistake in production.

eltoozero• 9 years ago

Weird, I see 223269?

shmerl• 9 years ago

Is it someone's fiction?

misingnoglic• 9 years ago

This is hysterical, I love that tech has their own way of humor.

catnaroek3• 9 years ago

They should have checked their password with https://inutile.club/estatis/password-security-checker/ . It correctly identifies both “hunter2” and “dolphins” as unsafe.

reificator10• 9 years ago

That's a very good resource. I typed in gibberish to make sure it was what I hoped it was.

catnaroek3• 9 years ago

Of course, “gibberish” is also an unsafe password.

whack• 9 years ago

I don't know how safe it is to enter my password into a site I've never heard of before... Not that I'm accusing them of it, but this is the perfect setup for a phishing scam.

catnaroek3• 9 years ago

It's a joke site. This is what it looks like: https://i.imgur.com/Sm1IaZO.png

Some people just don't have a sense of humor.

MechEStudent• 9 years ago

So, they want the password off the list, instead of changing it to something (much much much) more secure? Some variant of "battery horse staple and correct", right?

linkmotif• 9 years ago

This is a joke.

jameskegel2• 9 years ago

I'm going to let this one slide, because most of us are not working today for various reasons, but I must note, I've never seen this side of GitHub. I probably spend too much time cloistered in work projects to notice.

ghrifter• 9 years ago

I'm going to let this one slide

Thanks for your benevolence.

jameskegel2• 9 years ago

Your snark is noted. However, unlike those that come here to delay their day's tasks, I come here to learn and be exposed to new things. As such, humor has never been a quality I seek from HN, and it detracts from the point of being here, for me.

yashinovsky• 9 years ago

Fun trolling :)

hardlianotion• 9 years ago

Nice. Subtle.

desireco42• 9 years ago

I don't know what to think, he knows how to make a PR but doesn't get this simple thing... :)

noncoml• 9 years ago

He is trolling.. but I guess you are meta-trolling..

zszugyi• 9 years ago

Thanks for this. I went ahead and created a merge request to remove my passwords too. /s

mattbgates2• 9 years ago

My address is listed in the phone book as well. Is there anyway I can get that removed? :P

gerdesj• 9 years ago

Country?

mattbgates2• 9 years ago

Oh, it was a joke. Guess the topic of this was meant to be serious, ha. I even got downvoted.

cyberferret• 9 years ago

That comment thread was gold, if only for the link to the most secure password in the world site... [0]

[Disclaimer seeing as the original joke was missed by many - this site link is totally tongue in cheek too. DON'T use the suggested password]

[0] https://mostsecure.pw/

darklajid• 9 years ago

Secure Connection Failed

An error occurred during a connection to mostsecure.pw. SSL received a record that exceeded the maximum permissible length. Error code: SSL_ERROR_RX_RECORD_TOO_LONG

Just me? Is this just too secure™ for Firefox' liking?

daveFNbuck• 9 years ago

It's just you. It worked fine for me in Firefox.

tlrobinson• 9 years ago

Reminds me of xkcd "Random Number": https://xkcd.com/221/

microtheo• 9 years ago

I'm not really a security expert, but wouldn't it be harder for hacker to notice the hack if you leave it and wisely change the first letter to upper/lower case?

peterburkimsher• 9 years ago

The comments are humorous, of course, in the context of sharing passwords.

What if, instead of a password, the text to be censored is:

09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0

(That's a code that can be used to crack Blu-Ray discs).

Further reading: https://en.wikipedia.org/wiki/AACS_encryption_key_controvers...

https://en.wikipedia.org/wiki/Digital_rights_management#Oppo...

https://www.eff.org/issues/drm

hi41• 9 years ago

Can someone please explain. I don't understand.

Remove my password from lists so hackers won't be able to hack me

Related Stories