Brute force protection
It’s not quite complete without code on the password reset page to tell you that you can’t reuse your password.
And label the text box “username” when it only accepts email address.
Don’t forget to have hidden password requirements and secretly truncate any password longer than 12 characters.
Battle.net used to not be case-sensitive for passwords, back in like the pre-wow era.
Well yeah, if you don’t truncate the password to 12 chars how will you fit the plaintext in a memory efficient fixed latin1 CHAR column that only accepts letters, numbers, and underscores
/s
Well, I sometimes input the same password 15-times in a row, and it works only on the last try. ¯\_(ツ)_/¯
if isFirst14Attempts
I swear this is what some websites do
Cell phone lock screens too.
Also USB cords
took me a solid 30 seconds of re-reading to get the joke
Fine I’ll just change my password to what I thought it should be.
*New password cannot match old password
The one guy got grey hairs in-between slides lol
As a non programmer, is the joke that humans will retype their password assuming that they made a typo?
If so, sick indeed.
The guy coding made it so, on your first attempt, even if you answer correctly, it will tell you your login failed due to incorrect username or password, to joke about how it feels like you always get it wrong on the first try
The logic is bugging me, though. It should be
if isFirstAttempt || !isPasswordCorrect
I understand the meme is trying to convey in spite of being correct to still return an error, but then it doesn’t account for when the password is actually incorrect.
@gibmiser
Yes exactly 😂
I remember in college editing OpenSSH source code to instead of return wrong password to a root shell prompt just to stop brute force attacks
@Pacmanlives
Couldn’t you just disable root login in the sshd config?Oh all of my configs are deny root ssh login or without-password. I noticed a significant decrease in scans when returning a root prompt when I did that. This was also in the mid 2000s so who knows how things would be in this day in age for a reduction in scans
@Pacmanlives
So it was a fake root prompt which tricked the bots into believing that they logged in successfully but in reality the prompt could do nothing on the system?Correct
This could actually work though lol, it’s genius
Example of what My passwords are like :
%*7EfOLkN!8Dl#
or potentially if allowed :
W@c2wYnN9J3xGcyc47#ZkHJvt&Hm%q&Ad0b&Xwz#jnl4Th%6UBexD16a$YBFc@svnVrCBxXP0EpwLp6%Gk*Lom%@Qq#DjY1zsf0CzIrHHqPc8gt4edDVsg!omj*kIsIJ
Good luck guessing my shit.Amateur! Strong enough passwords are like:
ÕÚüd¸2stb½õ~jëv×Â/oyÓh²î´t¶»Ö°ÍðoNVRïé2Wc4'H,CâÞó_ökÅ,Kð¡X9ÄÀ.þTØÓoæ73d*ëÞ¢?²i"`צeÉçß,ÎÅëüS.¹([)ãÒÑêf9÷¿¢=@Á×ÅQÎÂßu¸Å(iRZµîw&ãR
Try this on for size :
`'�d+�t<�5mF�qrqcmv/�F��~��Yv�Om�/lK�RɏY%ɺP1�h�Ryl-�G/��m�ʰ�+^)��<>�itdkaz�q2HA*1�PK�D@{9�vN.<}�~ٕ�_�26IA/cHIn����1ĈҾܒl�I9$�vA��W¸ȶW"z�}θ�x�,>~�Ux�SJZ\�5ÀI��F}nLZT�;KӚq�&NQo32y7���0"^LÎs>��j!��V��k��2O<2W�ƽYcA#8�J�Of�pهZb�%1g�w�!k*h(ʶ73�@�CC�hUsԺe!_��dR�ٞpvG|.=4{v"&.��m=_�͚DZZף�aaZ��Cq�!sG1T3�=2lb,����^�镰n)Ld]��Ϯ
You lever is very low! There are not displayable characters so you cannot easly verity the password by eye or copy from paper.
Why would I have to verify by eye? That’s what a password manager is for. And writing your passwords on paper? ಠ益ಠ
Sometimes you have to give a password to a friend on a paper or by a phone.
#ENHANCE
`̴̢͚̳͕̹̻͕͎̍̓̐̍͜’̷̤̖̖̝̱͍̲̲̙̥̮̐̊̎́̄̎̅̔̾̈̑̈́͌́̀̅͘͘͘͝�̸̢͍̥͍̪̭͍̥̈̏̄̒̓͆͐̿̈̐̇́̑̎̆̽̉͗̾͝͝ḏ̸̛̛̛̣̾̇͂̆̒̍̌̈́̑̀͗̄̃̈̋͆́͝͝+̸̢̢̢̨̛̛̠̫͖̲̙̱̝̖̙̮͎̭̥͔̈́̈́̏̇͋̉͝�̸͕̠̞̭̺̘͓͕̞̥͔̫̖͙͗̆̀̑̏ţ̵̢̛̜͕̪̠̱̪̰̼̣̘̹̠͎͚͈̯̣̭͗̊͒̓̆̈́̑͂͌̈̒̂͘͜͝<̵̧̨͓͕̯͍̠͇̦̤̼̻̩͖͈̪͒̈́́́̊̍̒̈̉̉͒̓̀͝�̵̛̪̳̱̘̾̀̀̏5̶̡̛̛̻̝͖̱̗͇̝̹̱͚̟̳́̋̊̾̏̉̔͌̀́͛͘̚͝͠͠m̶̬̣̜̥̝̖͌͛̿̇̑̎̓̍̈́͑́̾͌́͌͝F̷̧̡̤̭̟̹̰̭͖̲̙͇̤͓̓͋͂̈́͛̄̓̌̓́͛̑͛́�̶̢̢͔̞̬̰̞̹̝͇͕̰͕͓͎̐͌̊̎̚̚͝q̴̢̙̭̠̮̜̳̜̜̰̭̬̘̮́̋̉r̵̢̡̗͍̮̳̼̪̟̙̙̫̯̟̝̙͆̈͆̊͂̓̆̾̓̎͋q̴̡̡̛̣͚̯̝͈͙̣̙̣̻̺̹̼̈́͝͝c̷͎͙̤̭̬͉̲̼̼̦̯̾̒͆̾́̑̿̿̎̅͛͛̽͐̓͐̈̐̑̕͝ͅͅm̶̡̻͈͍̊̏͌̈́̉̓͐̅͑̐̅v̵̢̧̢̧̛͚̘̞̩̜͙̟̼̳̖͚̟̖̯̬̬̲̎̈́̊̈́͗́͂́̉͆̇̌͛̏̌̓̐̃́̀͘/̴̣͈̈́́̓̀̒̊͑͘͠�̵̧͈͈̤͔͕͙̼̬͈̰͍̲͍̓̈́͂̂̓͐̀͆͜͜F̵̨̤̦̯̯̞̖̖̾̑̍̀̏̽̽̏̓̔͛̾̕͘͠�̸̛̙̔̅̐̇̄͆̎�̵̴̡̨̡̛̛̛̲͓̟͉̩̝̫̹̬̜͍̲͓̰͇͚̫͉̂͂͛̋̔̽̓̏͗̐̍͂͛̃͝�̸̡̝̻̞͕͚̝̖̘̙̳̳̲͔͕͉̳̙̞͂̀̽͛͊̈̃̐̾́̏̂̏̔̚̕̚̚̚�̴͉̲͖̈́̇͒̿̄̽͛̈́͛̚͝Ȳ̴͍̎̋̒͒ṿ̵̛͓̎̋͂̔͊́̎̿͛̽̍̊͋̂̚̚̕͝͠͝͝�̵̢̨̙̪̥͙͉̥̔̈͋͋͒͆̈́̔̂̉ͅͅǪ̶̙͚̺̩̃̊̌̽̽̌͠͝m̵̨͈̹̬̑̅̂̆̍̋̾�̵̹͍͉̰̺̝͎̲̳͑͌̀͘͠/̶̨̢̰̳͈̬̙̫̫̺̹͓̰͓̞̠̆̈́̀͗̒̆̋͗̀̇̐̎̓͐̇̀͛ͅl̷̨̢̛̜̥͚̰͖̬̝̫̭̜̦̠̤̣̎͊̿̽̎̓͗́̋̍̚͜K̸̞̫͕͇͍̰͖̮̞̭̏̉͋ͅ�̸̗̤̥̘̫̮͍͉͔̪̫͕̞̳͎͍̰̦̅͜͜ͅR̶̻̣̮͌͋̂̍ɏ̶̢̩̩͔̼͔̖͌̍͒̐̀̔̀̈̐̈́̽̈́̃̈́̅͋̓͑̕͠Ÿ̸̧̧̨̥̺͖͉̼̦̭͔̼͇̪̺́́͐̒̑̇̂͗̆͒̀̈́̀̓͜͠%̵̡̨̺̱͈̘̺͚̞̩̯͓̯̜̜͙̰͚̯̽͗͊͌͋͌̎͒̏̋̉̓̄̚ͅͅɺ̵͎̼̊͆̅͐̐͒̊̈́̏̐̀͆̄̋P̴̧̯̫̩̪̭͓̠̙͇̳̭̌͜1̴̹̝̠͋̈́̾͒͐͌͛́̇̓͘͝�̶̼̪͐̂͐̈́́͌̽̓h̶̦̲̹͍͖͚͇͔̺́̅͑͒͜�̴̮̃̔͊̓̌͌̿̅̾̌̉́̍͑͠R̴̢̧̠̩͖͎̘̝̰̳͓̹̱̦͔̫̥̭͉̣̦̥̈́̃͋̈͘̕y̷̡̗̱̤͕͈̰̻̥͙̹̲̱̙͌́̍͑́̓̓͒́̐̈̉̎͜͜ļ̵̡̫͔̳͇̤̹͇̹̝̱̠̰̯͇̰͖̾̓̋̊͊͘͜͜͝-̷͚͓̤̳͕̼̈́͂̌͂̊̈́͛́͌̃̎̒͛̾̑̈́͘̚̚�̴̛̩̝̦͎͙̦͖̜̺́̀͒̀̉̈́̐̔͘̚͠Ĝ̶̖͙̯̞̖̲̣͆̌̆̏̈́̐͆̄́͋̾̽̂͠/̴̢̨̨̳̤̜̖̞̺̥̲̯̻̼͇̰̭̀̔̾́̽̒̍̊̑̈̓̈́͒̿͆̋͝͠ͅ�̶̤̼̗̼̩͎͋̓̄̎͌͛͆̓̎͐̔̚͝͝�̸̞̗̟̹̀̈́̆̀̆̽̇̀͒̽́̍͘m̴͓͈̞͔̦̣̯̽̋̌̃͗̆̓̇͒͑̐́͂̈́̀̚͘͝�̸̡̧̨̢̧̠͍̲̩͓͓̼̟̙͕͍̘̪̯̣̀̒͛̈́͊̋̔̓́͌̓͜͝ʰ̵̛̘̳̣̭͈̣͎̲̠̘̞̭̦͔͍͉̟̄͒̐̈́͋�̵̢̮̖̮̭̣͖̙̟͍̫̱̤̮̋ͅ+̷̡̬̣̲̬̺͓̱͔̗̦̀̑̒̒̓̉͋͌͑̉̊͘͜͜͝ͅ^̵̢̬̥̫͖̟̖͇̜̺̙͔̹͙͇̦͓̺̮͖̄͒̒̐)̷̧̳͉͔̜̥̪͚̩̋̂̊�̷͕͔̺͎̼̫̮̟̫̤̣̰̗̖̩́̋̊̋̿̀̐̑̇ͅͅ�̸̠͓̩̤̊̍͂̊̀̏̋̾̉͒̇͑͑͝͠͝<̴̢̹̗͓͍̣̺̩̟̗̪͗́̂̆̋͌͗̏̐̑̕>̴̝̓͌�̷̡̧͉̙̪̝͚̪͇͖̗̜͓̬̙͕̙̞͚̎̄į̸͓͈̪͈̹̻̠̩̳̱̝̮̘̻̗̀͠ͅt̸̮̱̱̗̞̤̦̦͈̤͚̝̞͖̝̉̆̃̇͌̋͒̉͂́̓́͐̿̚̚̚͝͠͠ͅḑ̴̨̜̪͍̪̝͗̿̌̓͆k̸̨̡̡̮̗̯͈̠̥̗̰̦̪̤̹̟͕̼̜̹̑̑̽̀̈́̔͆͘͜͠ͅa̵̢̛̰̜̤̘͍̳̞̬̟̯̳̖͙̠̬̠̦̟͑̊̇̄̈́͐̆̀͐͒̚z̸̡̢͎̖̯̼̗̼̼͎͙̟̱͖͎͊͜͜�̴̢̮̞͍̓̓̀̇͐͂̅̈̀̏͛q̶̥̖͂̾͂̿̈́̏̈́̉̓̈́̑́̉̉͘͝2̴̡̛͍̬̙̲̫͓̪̪̬̪̹͇̖̞̹̬̼͓̾̔̀͋̋̉̀͆̊̇͘͘̚͘͜ͅͅH̸̟̹́͋̿̈̄̒͋̑̄̂̋̌͐͒̑͛̚̕̚͘Ä̸̛̱͈̦̼̭̞̯́̄̇̈̿͛̈́*̸̡̛͈͇̼̣̰̼͉̤̱̝͙̺̤͎̙͚̈͜1̷̨̡̖̬̤͇͓͙̖͓̬͓̟̰̻̌̓̈́͆͗̄͝�̶̡̢̛̭͚̠̻̤͍̥͔͆́͛̍̀̇́̀̑̚͝P̴̨̡̟͕̗̗̞̈́̿͋̉͂̈́̊͝͠͝K̸̢̧̪̘͚͖̗̐̒̿͜͝�̶̡̛̟̓̾̃̄̋̈́̑̓͠Ḋ̴̦̍͌̊̌̌̉͊̂̇́̿̆̓͐̓̊͝͠@̸̧͎͍͍̮̞̯̘͔̿̆̇̓̈́̋̿̃̽̇̒͗̚̕͝͝ͅ{̵̦̱̺͇͖̦͙̼̖̑̃̌͊͆̑̎̎͌́͝͝9̷̝̰͇̩͓͎͚̯͔̞̳̈́�̵̨̼̝̰̱͇̯̼̖̤̦̜̯̪̀̈̉̚v̷̮͉͙̘̬̟̌̓͐̀̓̀̈́̚N̸̛̞̣̟̭̒̈̌͛͗̉̏͊̃.̵̡̧̻̼͍̭̤̣͉̩̦͕̻̓̎̽͛͆̊͐̔̓͒̃̆̊̀̿̓̀̚<̴̣̠̤͉̩̠̹͉͍̾̈́́͊̍͘̚͝}̵̡̨̡̡̨̛̤̱͇̠̫͇͗̈̈́͒̆͆̀͋͋̾̓̈̃͌̇̈́̕͜ͅ�̶̵̸̢̡̧͔̦̳͕̜̘̗̤͍̞̙̮̪͔̦̪̬͔̝ٕ̹̟̘͉͔̯̝̹͋͋̌̃̂͆͋̈́̾̎̏̏͊̈́̈́̿͊͛͒̈́̐͑̿͗̓́̎͊̐̽͛̾̒̕̕̕͝͝͝ͅ�̸̨͓̠̐̽̽̓̋͂̒͑̎̕͜͜͝_̷̧̤̤͉͈͖̯̬͑͛̎͐̎͊̆͛͌̒̎̆̍̋͝͝ͅ�̷̢̇̍̀̾̓̊̇̈́̾͑͛̅̚̚̕͜2̵̡̢͍̞̲̳̠͕̳͖̹̣̱̞͕̄͑̾̇̐̌̍͠6̴̡̨̛̩̝͈͙̲̪̝̖̞̪͉̟̞͙̪̺͖͑̎̀Į̵̲̝̦̗͆̓̑̈́̀̊̈́͋̾̾̃̚͜͝A̷̢̻͍͈̱͎̥̦̪̹͎̖̼͐͐̄̔̏͆̕͠/̸̡̢̛̮͎͈͓̝͛̈́̋͌̂͗́̐̐̅̀́͐̃̀̾̈́̐́̕c̶͓̦̲̻͓̩̝̼͕̱̆̈́͐H̴̛̩͉̭͔͍̠̠̯̃̚I̶̢̛̬͙̥̹͙̳̯̪̩̤̬͗͐̃͛̅͊̇̎̌͛̓̓̄͆͘͘͜͝͠ņ̵̹̤͈̩͍̤̫͕̞̮̗̩̪̪̄͒̈́͆̃́͌̐̅̚͝͠�̷̡̲̙͈̦͎͈̱̯̤̲̾͐͋͐́̍̇̂͌̕̚͘͜ͅ�̴̧̛̛͙͉̎͒̍̊͗̊̾͆̈́͆͜�̸̡̨͓͙͍̯̖͚̼̱̜̳͔̱̪̠̮̜͔̱̝͊̔͛̎͗̏�̴̛̛̤͇͔̈́̐̐͗̔͌̆̉̋͒̔͒̀͑̈͂͘͝͝͝1̵͈̆̈̉͘Ĉ̴̛͖̗̗̳̣̣͓̦̗̾͛͑̒̈́̋̐́̇̿͐̌̓͋̂͑̌̇̑̐͜Ҿ̵̢̨̤̜̬̲̳̗̏͆͒̋͆͐͗͌̽́̓͌͊̅̈̍̂ܒ̸̡̧̺̞̦̤̺͍̙̮̭͖͊̔̌̈́̋͂̋̆͌͛̐͐̌̋̃̀̇̕͝ļ̷̙̠̙̦̞͗̓̃̓͛̅̌̑̉̃͑̈́̓͂̔̈́͊̚͠�̷̢̛͉̬̩̟̭̺̤̙͙̲͚͕̋̎̒̈́̐̊̐͊͌͜͠Ḭ̷̸̛̺͚̫͎͐̓̈́́̄̄̆̊͗͐̅͂́̓̏̀̊̋̈́́͗̇͂̀̐̚9̷̧̧̛̻̼̱̱̖̞̟̘̦̻̜̺̥̫̥͔̰̣̞̔̽̈́̋͊̃̽̈̿̊̈́̀͝ͅ$̶̝̳̙̭̘̈̔̄́̀̃͗̍̅͜͝�̴̡̨͙̭̰͇͍̦̯̱̗͈͒̓̊́̊̎̎̽̄̌͛̊͋̏͗̕͜͜͠͝ͅv̴̡̢̨̰̙̘̞͎̹̝̫̰͙̰̞̦̬̖͍̽̑̒͗͆̉́͂͜ͅĄ̴̛̤͔̞͎̣͍̱̬͕̹̻̮̟̱̎͂̈́̔͂̋̔͒̌͂͋͂̽̂̕̕̕͜͠͝ͅͅ�̸̯̞͇͉̯̝͕̐̉̊̈́̅́͒̅͌̍͛̃̐͝�̷̨̢̛͙͉̖̯͈̻̗͙̯̬̹̫̘̼̲̀̉̒͋͂͒̐̆̑̊̅͗͛͒̉̒́̔̕̚W̵͎̟͇͕̞̲͓͎̫͍̹̟͇͊͜¸̸̙͙̥͉̘̌͛̒̇́̄͋͋̑̓͋̊̋̾͑̕͝͝͠͝͝ȶ̷̛̫̝͚͙͓̗͈̆́͐͑̽͊͒̍́͛̇̐̑͠W̸̨̧̛̦̯͕̦̊͒̏̈́͑͂̄̽ͅ"̵̧̢̯̳̟͍̥̤͍̠͍̻̻̻͉̼̐͗͜͜͠z̶̧̡̨͉̗̼̳̜̬͈̹̝̱̗͕͙̦̣̬̦͚̊͋̌̐̄̎̑͘͝ͅ�̴̡̨͓͖͉̱̫̻̾̍}̷̧͓̗͕̙͙͔̳͒͋̾̌̄̆̈́̎́̔̾̔̐́̎̕̚͜θ̵̡̝̣̝̣̪̱̞͕̺̈͗ͅ�̶̧̣̤̥̜̮̰͇̹̿̀̈́̂̀͌̿̍̿͒̍͒̋̉̕͜͜͠͠͝x̵̝͂͐̏̓�̸̤͇͍̰̒͊͌̔̈́͂͊̽͘͘͜,̵̪̠̯̳̻̝̖̲͔̫̜̬̤̫͔̜͛̀̈̀̿̎͐>̴̛͕̰͖͖̜͕͖̭͍͎̤̥̖̺̃͂̀͊̈̍̃͋͘~̷̫͍͔̓̓͊͋̔̄͛̅̊̈́̽́́̾̆͌̚͝͝�̴̡̡͚͚̭̫͎̘̰͔̣̲͚̘̭̦̪̻̔́́̓̀̈́͂͗̐̎̽̔̉͠ͅU̵̬̲̹͈̮̖͇̫̻̝̾͊̿͋̀͜x̴̢̧̧̧̖͇̜̱͇̜̤͚̣̜̬̞̺̻̿͂́̽̍̓̒̃͂͊̈̌̄͛̾̎̈̕͠͠͝͠�̴̺̠͖͕͈̰͍̥̖̪̜̞͓̹͚̺̣͍͔͒̉͌́͂͆́͑͌̑̽͘S̵̡̨̮̟̬̲̹̬̩̠͙̜̤͉͇̙͚̬̀̽̈́̓͊̀̉̌̈̀͛͑̌͝͝͝ͅJ̴̡̛̺͒̌̎̒͂̽̏̂͐̔̓̕̚Ž̸̠͎̘̹̺͍̘̤̫͍̮̽̋͆͋̄̂͊̇\̷̡̛͕̟̞̦͚͚͉̭͈̦̟̰͉̲̬͎̹͈̗̀͊̅͒̎̓̐͛͗͆̀͊̀́͊̄́͘͜ͅ�̷̜͙͓̲̘̰̲̘̟͑̃̐̏̾͗͗̈́͂͋̈́̐̊̔̀̏̌̔͜5̶̝̺̼̰̥͍̯̯̰̟̭͇̙͇̻͔͎͙͍̦̣̝̈́̈́̒̐̎̌̐͌́͆́̌̀̽̒̕͠͝͝͠À̴̡̨̛̻̩͇̼͖͑͌̉̿̾̒͐̋̓̽̎̿̚͜͝Ǐ̶̢͚̦͂̾̊̌̓̉̽͒͛̔̓̍̆͛̍̒̀̐́͠�̶̳̣̹͖͔͍͇̙̩̭̮̋͛͌̽̓͂̓̎̈̆̓̓̔̑̀͂�̴̺̖̖̣̺̗̠̱̪̻͛́̎̒̎̐͑̃͌͠ͅF̶̨̠̜̱̦̼̖̭̤̣̭̒͊̓̚͠}̸̻̬̤̅͑͒́̉̿̎̔̔͊̾̍̀̄͆̅̅͐̈́̉͘n̵͓̯̫̖͓̜̋͊͌̑̉͑͐̏͂͌̈́͌̂͌͑̕̚͘Ḻ̸̡̢̖͚̙̦̩̺̱̪̬͎͚̼͔̪͖̃͑́̊Ž̸̧̧̬̣̜͐Ț̵̨͛�̶̢̢̡̢̢̛͎̫͔̥͕͕͙̭̹̟̜̭̌̾̽̊̑͌̑̅̎̀̌͋̏̇̉͒̚̚͠;̵̹͇̹̪̠͚͉̼̰̬̱͎̳̺̈́͌́̉́̔̃̽́́̚͝͠Ķ̶̛̞͈̟̠͔̰͈̯͙̱͕͉̙͉͍̱̪̔̉̌̌̇̊̂̓́̑̋͂̈́̆͒́͜͝͝͝Ӛ̸̧̡̳̱̩̪̟̜̦̝̤̘̄̓͋̀̊̉̔͆̒̿́̿̍̃̚q̴͉͓͖͊͗̎̀�̴̛̛̱͍̀͂̏̌̓̈̒̀͠͝͠&̴̛̞̝͔̝̙̯͇̥͎̱̰̭̬̘͈̂̀̅̀̂͑́̉̈̓̐̔͝ͅN̵̰͎̜̼̤͈̎̒̀͒͆̌̓͑̈́̉̕̕͘Q̵̨̞̩̼͈͔̖̪͉͉̜͈̦͔̹̳̉͌̇͜ō̷̡̨̡̼͇̲̝̟̦͚̤̙̤̺͋̿̈́̐̆̀̇́̃͐́̄̔̚3̸̢͖̭̤̥̆̇̂̔́̊͐̐̅̌́̋̈́͗͠ͅͅ2̵̧̛̥͙͙̫̙͉̺̖̬̪͎̩̙͚̺͐͛̉̃̎͗͐̄͌̎̍͑̃̚ͅy̴͕̬̙̥̝̪͔̭̺̪̙̟͍̼̜̜͚͉͙̬͂̄̂̀́͋̋́͒́̀̋͗̑́̅͝7̸̢̢̧̢̨̳̺̱̲̝͚̣̺̲̞̹̜̼̣̭̘̓̽͑͛͒̇̇̾̎̔͒̈́̄͐̕̕ͅ�̵̨̨̧̛͇̩̫̲̯̜̤̼̥̲͔͉̐̅̓̍̀̓͐̎̓̉̋̿̿͆͘͘͜�̸̝͍̠͚̫͎̉͂̉̀́͗̌̓̇̋̕͜�̶̨̨͔̫̹̩̮̠̬̠͚̩̻͓͈̰̇͂͊̿̑͐͑̾̀̐̑̂̅̚͘0̸̻̹̻͙͓̾͆̀̄̍̽͂̀̓̀͌̉͐̾͐͛͘͝ͅ"̴̸̨̖͖͖̦͚̫͙̠͓̪͚̭̘̟̜̘̞̘̰̗̟̃̍͐́͌̍͂̆͊̊̀̂̃̀͊͊̋͐̑̎̈́̿͘̚͜͝L̷̙͓͔̭͚͔͕̐̇͂̽̚Į̵̧̳̩̖̟̥͈̩̬̲̻̳͖͍͚̻̖̗̳͔̂̈́ͅs̵̡̛͚̲̹̗̞̙̬̱̘̖̫̦͍͈̜̣̮͍̽͘͜ͅ>̷̛̣͎̉̃̽̋̐́̌�̶̨̛͙̞͈̖̤̻̝̫̳̃̎̃̄͌̉�̴̢̨̺̘̳̪̤͈͙̣̳̤̠̝̮͉͇̟͈̪̤̉̊͗̇͜j̴̡̥͇̘̰͎̣̘̺͚͔͐͛̈̑͒̂͌̿̔̃̀͘͠͠!̴̡̡͉̰̮̱̭̠͖̥̳̘͉̩̈̊̀͊͊̉́̃̂̑͘͝͝͝�̶̨̢̡̛̞͉̺̦͙̙͒̀̈́̾̾̑͋̌̆́̑͌͐̿̍̍̎̈́͘͠�̵̜̤̖̞̤͎̱̪̞͖̬̻͙̽̋͗͆͜͝Ṽ̵̧̛̥̭͆͐̈́͊̀̌̉�̵̼̲̘͎̰̤͖͖̼̾́͌̿͑̄͜�̷̨̹͎͙͎̮̫̪̥̭̲̻͕͙̮̬̫̪͊̚ͅͅḱ̷̡̨͈̫̹̯̹̯̰̩̝͖̮͚͉̣̠̺̺͙̑̈̎̓͋̈́̕͜͜͠�̵̢̧̡͎̺̪͇̘̳͖̥̙̩̻̖͙̆̈̌̄̂̎ͅͅ�̶̢̮͓̮͇̩̖͈͙̘̇̿͛̃̅͗̂͂ͅ2̷̢̛̭̘̮͎̠̪͎̺͈̣̒̎̑̐̽̉̾͑̈́͑̽̒͒̈͗͝͠O̴̡̟̩̼̱͇͕̮̼̪̫͕͂̽̿̊̐͊̀͆͒̈́͆̉̿̾̿̚͘͝͝≮̨̡̣͍̜̯͇͔̗̘̯̗͈̹̱͎͚̠̼̯̓̓̌͛̊̚ͅ2̵̧͕̇̌̈̇͗̂̂͛̀̉̿͝͝Ẅ̷̝̱́̋̓̍́ͅ�̴̡̛͕̟͙̝̘̘̟̦̩̟̞͛̿͗͌͊̐͑͑̄̇̾̽̑̑͗̔̀̕͘ͅƽ̷̛͖̦̭͈̹̮̤̾̍̇̓̉̒̀̔Y̵̡̢̨̪͓̼͉̦̣̟̺͙͔̘̦͙̬̪̬͙̌̔͌̔̊̇̂̋͂͆̆͐̍͐́͘ĉ̴̡̡̟͍̰̣̮͈̣̜͈͇͎̈̍͗̅̐̀̔̈́̈́͝Ą̴̛̪̙̺̻̼͔͔̥͇̥̙͚̐̔̉̔̈̎̂̄͒̇͗̕̚͝#̸̮̖̪̍̉̇̑̀̋̉͆̒̀̿̈́́̇͋̂́͝͝͝8̵̛͙̤̲̟̥͚̘̰̬͕͖̰̋͆̀͊̒͋͝�̷̡̨̨̖̝̱́͐͘̚ͅJ̴̨̡̟̰̬͚̬̰̞͍͇͔̞̲͓̝̠͚̘̮̈́̂͂́͒̀̈́̅̄̏̋̍̃̑͠͝�̷̢͔͔̮̖̹̙̺̟̩̫̼͓̘͚̙̩̐͌͌͋͊̕̕͜͝ͅÖ̸̧̨̭͓̘́̅̑̿̋͑̈́͐̓͂͐̀̂̆͆͋͆̇̐͘͠f̶̛̤̳̜̰̖͈̜̝͚͕̐̒̐̔̒̌̎͐̀̔̽̉̀̈́͘͘̚͝͠�̶̟̬͙͊̀̔̃̅̎̒̓͛́̓̔̂́͂̾̌̍̃͐̉͝p̷̡̨̗̪̟̥͂̄̕ه̸̥̤̺̘̞̗̔̉̇̊͌̏̒̓͂̿̂̐͆͂̎̓̽̕ͅẒ̸̡͍̞̺̮̖̝̠̥̗͉̥̻̟̦̘̖̥͕̈́͛͛̓͠b̴̨̤̬͕͍̺̗͇̳̙̜̭̱̻̩̳͚̳̲͎͙̿͛͑̎͆͗̌̈́̐̕͜�̵̛̜̦̗͔̹̙̪̬͍͈̯͉͙̞̲̞̜́̂͌̑́̏͜%̸̨͙͖̝̬̥̩̻͔̟̼͂̆̓̔̀́͋̂̋̃̆̂̾̏́͑̌͘͝͝͠͝1̶̢̧͔̼̤͓̙̜̑̊̉͋̊̆̓̆̋͂̅̒̾͜͝g̸̡̣̖̈̓̎̊̇͂̀̃̎̂̌̒̕�̷̡̮̯̺̺͉͔̬͋̔͐̒̉̈́͑́͘͠͝͠w̷̨̬̘̞͔͔͍̪͖̙̳̮̖̯͙͚̬̜̥̣̰̍̾̂̽͑̄̀̾͊͊͛̈́̇̈́̈́ͅ�̴̡̩̩͚̼̙̩͚̯̥̖̟̔̊̉̍̈́̓̈́̑̔̀͘͜͝!̴̮̾̒̀̈́̾̑͂͋͌̅̽̊́̄͊k̸̦̳̠̲̥̓̈͒͐̌̔͆̏̆͂͌̑̐͘*̴̨͕̬̜̼̣̮̈́̈́͑̐̔̑̓͋̏̏̕ḩ̴̪͚̲͉̗̯̗̺́̈̆̑͌̉̏̊̎͘(̴̨̨̙̩͔͗͂̈̄̂́̏̐͛̉̈́̑̏̒̇̈́̀͝ʶ̵̢̨̨̡̤̖̖̼͇̟̝̆́̀͂͂̒̍̃́͌͝7̴̛̭̰͓̖̝͔͌̿̈̀̔̃̒̿͌͗̋̑̈́̚ͅ3̵̧̗̱̙͔̳̻͚͙̞̆�̵̢͙̗͕͚͚̙̘͕͈͍͔̇͐̂́͂̄̀̈́̔̌̕̕͜@̵͖̱̭̟͝�̶̙̰̲͚̣̤̹̖̖̦̂̒͑̑̍̐͝C̴̡͉͚̹͍̖͍̭͚͍̠̲͚͚͓͒̌̃ͅC̶̛̞̤̭̐̅̇͛̀̄̈́̌͐͑͌̾̋̕̚̚͘͘͝�̵̛̰̥̲̻͖̭̮͇̬͎̿͂̒̃̽̂̔̓̏̈́͛̍̚̕͘h̸͖͎̗̪̠̰̐̊̑̋̃̏̈́͋͂̕͠Ū̵̱̘̹̳̒̐̏̃͜s̸̮͇̲͖͎̺͚̹͇͋̃̈́̈́̃͐̐͌̑́̕͝Ժ̵̺̙̯͎̲͎̼͇̺̣̙̦̗̔̓͑͒́͊̓̽ę̷̧̧͚̗̘͚̱̤͈͚̩͓̞͍̥͈̄̿̆̇͑̇͑̈́̿̑̅̒̚͘!̵̨̢̬̰̰͕͖̟̟̜͉̘͕͎̺̣̯̩̻̔̈́̓͐̊͂̔̂͑̌̐̅͐̓͌͌̈̐̉́̚̕_̸̧̫͔͎̙̠̪̼̖̞̣̗̮̗̦̭͉̺͕͕̔̋̆͛͛̑͝�̴̨̛͍̭̩̭́̌̓̀̍͝͝͝ͅ�̸̢̣͖̺͚̝͇̲̻̯͇̫͙̬̯͓͈̻͕͚̊̍̔̉͆̌̽̃̃̂́̋̀͝d̴͔̹͔̜͚͇̭̝̜́̏̇͊̍̓̄̚̕͝Ŗ̵̢̧̘̮̤̯̫͓̞̪̫̖͎̣̽͊͒̅͘�̴̶̧̢̢̦̺̜͕̜̥̥̦̙̗̖͇̦̠̭̰̞͓̳̙̌̇̿̆̈͊̍̑̈͗͐̈ٞ̽̂̋̀̉́͒͌̚̕͝͠p̴̢͎̦̮͕̹͇̯̦̜͈̖̣͔̜͖̹͕̓̀́́̾̕ṿ̷̨̨͉̹̪̝̥̞͔̦͇̺͇̺̱̓͆̒͒̊̊̂̄̾͊͋̓̑̀̕G̵̭͇̲̱̥̠͎̖̙͔̑|̸̧̬̰̯̇͂̔̇̎̅́͂̉̆̓̓̔̔̚̚͝͝.̸̦͈͓̲̗͎̻̝̬̇́͘=̶̧̧̧̧̪͚̝͉͚̩̲͇͇̜̪͍̝̫̒̓͋́̍̀͆̍ͅͅ4̸̧̨͚̞̰̗͍̭̬͇̩͚̣̟̲͍͎̃͋͂̚{̵̢̨̢̟̳̞̦͖̘̞̙̖̮̣͚̜̹̤̪͔̓̈͂͗̓̈͆̚͝͠ͅͅv̸̡̤̼͍̤̰̭͉̝̙̗͇̻̯̘̺̮̤̣͚̠̤͛͌͗̌́̽̏̌̓̅̚͝͝"̶̨̹̼̬̘͔̳͕̼̲̫̟̜̟̫̳̯̬͌̉́̀́͝ͅͅ&̶̡̜̬̣̬͓̻̱̲̯̰͉̯̱̳̮͈̣͉̖̟̇̊͜.̷̬͖̖̬͊̃̌ͅ�̸̢̢͓͈̝͍͎̺͋̈́̉͂͒͒̏͑̑̌̽̈̄̐̒̕͝͝͝͝͠�̵̢̨̛̯̖̣͚̹̠̘͇̞̭̗̲͓̊̄͒͂͋͊̀̋͑̓͑̈́͑̕͠͝͠m̵̧̧̭̟̮̣̗̥̫̼̱̻̞̳͉̙̱̮̫̪͂̅̀̋͗͜͠≠̛̯̺͎͋̌̀̐̔̈̇̇̽͌͑̏̾̍̾̓͝_̷̱͇͒̓̏̂̔͊͆͘͝�̴̷̡̧̧̛̭̤̞̺̹͎̭̻̖̮̹̳͖͚̹͉͍̥͓͕̥̘̻̜̓͗̐̒̄͊̐͋̀͗̀̔̍̾͛͗̆́̈̚̕̕͜͜͠͝͝͝ͅD̶̢̛͙̞̖͎̱̱͕͚͔͍̑̇͒̃͂̈́͒̃̐͋̊̃̈́Z̷̯͕̳̝͇̠͔̣͈̖̞̿́͜͝ͅZ̶̢̗̙̝̖̯̹͚͙̤̝̗̮͕͖̚ף̵̧̡̨̯͕͕̮̺̗̼̫̭͖̟͍̤̮͖͔̯̫̉̋�̸̫͍̞̘̻̠̮̖̥̱̻͈̹̣̦̖̅̍̓́͋́̉̓̓̅͘ͅa̵̘̮͍͍̮̠̦̙͉̔̉͒̽̓̅̏̈́͊͗͆̏̇̕̕͜͠ȧ̴̞͖̹̮̖͓̠̆̀́͝ͅZ̸͍̙̘̟̳̗͇̄̇́́�̷̡̤͍̝̦̤̻͙̹̱̱̗͔͔̻̙͔̠͗̐́̿̽̉͋̾̄͆̎̀͋̈̈́̌͜͠�̶̧̛̤̤̟͍̫̳͎̞̲̱́͑̓̽̾̀̑̍̾̿͊͑͜͝͝͝Ĉ̴̢̡̢̨̧̰̤̪̦̟̟͉͎̪̩̻̺̺̞́̈́̌̉̚q̴̧͕̫͉̻͓͖͖̞̣̰̮̼̟̯̰̒̾͊̀̇̃̿͋͐̾̈̃�̸̺̠̞̫̝̜̺̹͚͍̈́̆̔͑̏̌̀̓́́̏̀̃̓͋͑͘̚͝!̴̥̹̗̟͉̣̔̄̓̒̃̃̔̒͂̅̈́̂̐̎̐̅̋̕͘͜͜ͅs̴̡̢̛̹̰̠̰̥̤̭̰͈͉̥̞͓͈͎̹͙̲̈́̃̊̄̏̀̋̊̂͑̑̈͘͠G̸̡̡̢̣̣̭͎̟̱̮̗̰̣͕̱̩̪̞͚̅̽̋̉̈́̋̂̀͒͑͠͝1̴̳͒̾́͗̓̊̀̑̍̈́͑̈́͂͘͝͠Ţ̸̢̫̥̹̦̭́̓͒͜3̴̧͙̠̝̮̭͖͕̭̘̞̥̗͈͉̖̞͇̖͈̳̫̓͊͑̄͐�̸̛̱̄͋̓̓̑͑̔̑̐͒͂͐̋̀̌͒̕͝͠=̴̢̡̭̤̹͕̳͖̈́̀̀̍̿̚2̵̨͉̟̺͇̝̞̯̳̦̦̿͛͒̐́̀̽̂̉͐̂̽̑̕͘͠͠͝l̶͍̠̜̩̮̜͎͊̅͊̿͒̓̋̄̏̈́̀̕͘͘͝ͅͅb̶̨̩̞̠͕̹̘̩̮̱̥͔̭̯̯̘̈̈́͒̀͆̓͝,̸̠̊̂̑͂̍͂͒̎̊́̈́̊̈̎͠͝�̴̛̤̳̥̱͇̱̱̪̫̀̐̾̿̿̿̕͜͝�̴̢̢̯̙̲̻̳̩̞̭͈͉̥̱̺̙̱͎͙͑͒͌͝ͅ�̵̘̋̾͑͌�̷̸̢̡͕̳̼̣̞͙̖͔̬͔̙̦͍̲̹̰̬̯̣͔̠͔̼͔͕͕̗̝̮̈̈́̋̄̑́̌͛̿̈̐̒̏̍̕͘͜͜͝�̷̲̣̰͍̠͉͇̌̓̒̀̂̌͛̉͊͑͒̿͗͒̏̅͝镰̵̢̩̱̭̘̭̦͔̘͉̟̟̰͈̲̩̖̂̇͛͌̐̇̿͊͌̃̓̀̍̈͘͘̕ṇ̸̛͍̩͒̈́̓̓͆͌̈́̈́͂͠͠)̴͎̩͙̇̿̽̑̃̇̎͊̊̂͐̄͛͐̂̈̽̚̕͝͠L̷͙͔͇̥̹̩̝̟̞̙̯̣̦͎͂̍̓̃͑͊̇̐̊͆̿̀̇̓̈̎̚̕͜͝d̵̨̟̰̘͎̖̼̙̺͕̥̥́͊̀̋̄̚]̷̘̩͙̅̽�̸̧̝̗͉̮̱͇̯͔̭̦͓̤̣̗̘͚̫̪͎͚̠̽̓̉̋͆́̈͆́͂̀̔̀̚͝͝�̷̢̮̖͉̫͇̃͑͗̂̓͗͒̀́̅͂̈́̎̊̀͘̕͠͝Ϯ̵̡̢̬̣̬̟̬̰̭͇̬̫̱̐̐̎̄͌̅̿̓̒̓̈́͘͜͜͝
Entropy so strong it makes quantum computers cry.
Rainbow tables and presumably newer stuff I haven’t heard of make this sort of thing weaker than it used to be
How does a rainbow table help here? They’re more for decoding unsalted encrypted database tables, rather than for actually trying to login.
Salting makes rainbow tables pretty much useless, and salting has been a standard practise for a few decades now.
The rainbow table would have to include every four word combination. At around half a million words in the English dictionary, that’s not a small number.
As another XKCD comic illustrates, it’s cheaper to use a wrench.
I suspect if the cracking code was constructed such that it had more weight on trying combinations of common words then this would be much easier to crack
I would naively think that as well - you would expand your alphabet of “symbols” to include both single letters and numbers and punctuation but also common words as well. It is still a lot of combinations to have to try though, even if less than each letter by itself.
If they had the password right the first try, that isn’t a brute force attack, thats a credential leak.
It should be that it rejects the password the first time it’s entered correctly but accepts it on every subsequent try. That actually would provide some protection against like dictionary attacks and raw brute force attacks.
I think the author attempted first time login to be with the right password.
Best idea ever!!!