Comments for Yet Another Password Meter http://blog.yetanotherpasswordmeter.com Just another password meter and its blog. Thu, 01 Jul 2010 20:32:49 +0200 http://wordpress.org/?v=2.8.4 hourly 1 Comment on A new version arrived – v1.1.0 is here by Rene http://blog.yetanotherpasswordmeter.com/2010/05/15/a-new-version-arrived-v1-1-0-is-here/comment-page-1/#comment-292 Rene Thu, 01 Jul 2010 20:32:49 +0000 http://blog.yetanotherpasswordmeter.com/?p=22#comment-292 @mischachiaro: I fully agree that you need longer password for strong encryption. I designed my web site to give normal user a help for protecting himself a little better. You are an expert already. @mischachiaro: I fully agree that you need longer password for strong encryption. I designed my web site to give normal user a help for protecting himself a little better. You are an expert already.

]]> Comment on A new version arrived – v1.1.0 is here by mischachiaro http://blog.yetanotherpasswordmeter.com/2010/05/15/a-new-version-arrived-v1-1-0-is-here/comment-page-1/#comment-291 mischachiaro Thu, 01 Jul 2010 20:20:55 +0000 http://blog.yetanotherpasswordmeter.com/?p=22#comment-291 I don't know how to code. I encrypt all my drives with TrueCrypt. That's why I was trying long passwords. Those people I know, who use full computer encryption (with TrueCrypt or otherwise, some Linux distros have it as a native option), use 20+ characters passwords as well. It's standard behaviour for heavy encryption, since the password in that case is the weakest link. Web services have exploitable vulnerabilities beyond the user's reach. People normally aren't afraid of having the data from their computers compromised, so they don't use encryption. That's why passwords of more than 8 to 12 characters offer little to no benefit in those cases, the system itself is less secure than the security a long password could offer. I don’t know how to code. I encrypt all my drives with TrueCrypt. That’s why I was trying long passwords. Those people I know, who use full computer encryption (with TrueCrypt or otherwise, some Linux distros have it as a native option), use 20+ characters passwords as well. It’s standard behaviour for heavy encryption, since the password in that case is the weakest link.

Web services have exploitable vulnerabilities beyond the user’s reach. People normally aren’t afraid of having the data from their computers compromised, so they don’t use encryption. That’s why passwords of more than 8 to 12 characters offer little to no benefit in those cases, the system itself is less secure than the security a long password could offer.

]]> Comment on A new version arrived – v1.1.0 is here by Rene http://blog.yetanotherpasswordmeter.com/2010/05/15/a-new-version-arrived-v1-1-0-is-here/comment-page-1/#comment-289 Rene Wed, 30 Jun 2010 20:57:31 +0000 http://blog.yetanotherpasswordmeter.com/?p=22#comment-289 @mischachiaro: Well, I tried to make it as real as possible. Long passwords are unusal and a normal human will neither use or manage them. Why are these long passwords important and why does it make it difference how much redundancy it has? The first part is already good enough to be hard to break. If you are fit in JavaScript, you can take the code (it's free) and improve it. I would really value your contribution. An option to determine the desired optimal length for instance would be a good feature. Thanks. @mischachiaro: Well, I tried to make it as real as possible. Long passwords are unusal and a normal human will neither use or manage them.

Why are these long passwords important and why does it make it difference how much redundancy it has? The first part is already good enough to be hard to break.

If you are fit in JavaScript, you can take the code (it’s free) and improve it. I would really value your contribution. An option to determine the desired optimal length for instance would be a good feature.

Thanks.

]]> Comment on A new version arrived – v1.1.0 is here by mischachiaro http://blog.yetanotherpasswordmeter.com/2010/05/15/a-new-version-arrived-v1-1-0-is-here/comment-page-1/#comment-288 mischachiaro Wed, 30 Jun 2010 20:49:57 +0000 http://blog.yetanotherpasswordmeter.com/?p=22#comment-288 Another peculiarity. The password " QmJ/6LTxt:Yrg'-1111111111 " has the same scores as " QmJ/6LTxt:Yrg'-1WK.IJuoDb ". The only thing that changes in the stats is redundancy, which doesn't affect the scores. I think your password meter is optimized for 8 character strings. I'd like to see it manage long passwords better. For 8 character passwords it's fine. Another peculiarity. The password ” QmJ/6LTxt:Yrg’-1111111111 ” has the same scores as ” QmJ/6LTxt:Yrg’-1WK.IJuoDb “. The only thing that changes in the stats is redundancy, which doesn’t affect the scores.

I think your password meter is optimized for 8 character strings. I’d like to see it manage long passwords better. For 8 character passwords it’s fine.

]]> Comment on A new version arrived – v1.1.0 is here by Rene http://blog.yetanotherpasswordmeter.com/2010/05/15/a-new-version-arrived-v1-1-0-is-here/comment-page-1/#comment-286 Rene Tue, 29 Jun 2010 21:30:14 +0000 http://blog.yetanotherpasswordmeter.com/?p=22#comment-286 Good catch. Basically the idea behind the new significance feature was a distinction between passwords with better data in the beginning of the password than later in it, aka the first 8 characters matter most. The reason is that some older systems only value the first x characters and ignore the rest. If you try only the first 8 characters of your examples, you will get 59% for "-3XDR45," and 100% for "NI3CE>le". These numbers influence the password quality way higher than the rest of the characters. What do you think? Does this answer your question? Good catch. Basically the idea behind the new significance feature was a distinction between passwords with better data in the beginning of the password than later in it, aka the first 8 characters matter most. The reason is that some older systems only value the first x characters and ignore the rest.

If you try only the first 8 characters of your examples, you will get 59% for “-3XDR45,” and 100% for “NI3CE>le”. These numbers influence the password quality way higher than the rest of the characters.

What do you think? Does this answer your question?

]]> Comment on A new version arrived – v1.1.0 is here by mischachiaro http://blog.yetanotherpasswordmeter.com/2010/05/15/a-new-version-arrived-v1-1-0-is-here/comment-page-1/#comment-285 mischachiaro Tue, 29 Jun 2010 21:01:57 +0000 http://blog.yetanotherpasswordmeter.com/?p=22#comment-285 I think the password meter isn't working, or otherwise doesn't give a trustworthy result. For the password NI3CE>leroy>Salam it gives a score of 100%, "Very Strong". For the password -3XDR45, fse/n.ur) N`OO*;:+Mat9v it gives a score of 77%, "Strong". How does that proceed? I think the password meter isn’t working, or otherwise doesn’t give a trustworthy result.

For the password NI3CE>leroy>Salam it gives a score of 100%, “Very Strong”.

For the password -3XDR45, fse/n.ur) N`OO*;:+Mat9v it gives a score of 77%, “Strong”.

How does that proceed?

]]> Comment on PowerUser.it featured YAPM by Michele http://blog.yetanotherpasswordmeter.com/2010/06/05/poweruser-it-featured-yapm/comment-page-1/#comment-265 Michele Thu, 10 Jun 2010 12:27:51 +0000 http://blog.yetanotherpasswordmeter.com/?p=32#comment-265 Thank you very much for sharing our article with your reader! We really appreciate your good job with Yet Another Password Meter! Thank you very much for sharing our article with your reader!
We really appreciate your good job with Yet Another Password Meter!

]]> Comment on Why another password meter? by Amy http://blog.yetanotherpasswordmeter.com/2009/01/01/why-another-password-meter/comment-page-1/#comment-243 Amy Sun, 06 Jun 2010 02:48:39 +0000 http://blog.yetanotherpasswordmeter.com/?p=5#comment-243 Hi Jens, Thanks. I know that the entropy plays a role. Redundancy and length are already covered which basically cover the entropy part. The value is not yet perfect, especially long passwords get weaker with a lot of redundancy. I am gonna change that soon. Rene Hi Jens,

Thanks. I know that the entropy plays a role. Redundancy and length are already covered which basically cover the entropy part. The value is not yet perfect, especially long passwords get weaker with a lot of redundancy. I am gonna change that soon.

Rene

]]> Comment on PowerUser.it featured YAPM by Teach Your Self How To Crack Windows Password « Free Software Download http://blog.yetanotherpasswordmeter.com/2010/06/05/poweruser-it-featured-yapm/comment-page-1/#comment-242 Teach Your Self How To Crack Windows Password « Free Software Download Sun, 06 Jun 2010 00:49:51 +0000 http://blog.yetanotherpasswordmeter.com/?p=32#comment-242 [...] PowerUser.it featured YAPM – Yet Another Password Meter [...] [...] PowerUser.it featured YAPM – Yet Another Password Meter [...]

]]> Comment on 4 characters minimum and no special characters? by CNA Training http://blog.yetanotherpasswordmeter.com/2010/05/16/4-characters-minimum-and-no-special-characters/comment-page-1/#comment-217 CNA Training Mon, 17 May 2010 06:42:50 +0000 http://blog.yetanotherpasswordmeter.com/?p=28#comment-217 This is such a great resource that you are providing and you give it away for free. I enjoy seeing websites that understand the value of providing a prime resource for free. I truly loved reading your post. Thanks! This is such a great resource that you are providing and you give it away for free. I enjoy seeing websites that understand the value of providing a prime resource for free. I truly loved reading your post. Thanks!

]]>