rhymepass
Security and privacy
password generator
SHOW HN2023
How HN took it
1 positive, 0 neutral or asking, 1 mixed, 3 critical, out of 5 comments about the project. Thread score -0.15.
Idea: 1 for, 0 againstPrivacy: 0 for, 1 againstPerformance: 0 for, 1 againstDesign: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Neat, fun idea that could make passwords easier to remember
From 2 comments
This is a pretty neat idea. This inspired me to think if there are any password styles that can maintain their security, while you could make a hint keyword public so you could…
great_psy on HNIt probably depends on the reference point. If I now use 4 words (2*2 rhyming words) instead of passphrases with 2 words, then the password is more secure than before (even if…
onion90 on HN
Objections
Default 20 bits of entropy is too low for offline cracking if the generation method is known
From 1 comment
If they know you used this to generate it, yes. Also, the default of only 20 bits of entropy is not nearly enough, IMO. That's only ~1M options. If you're using this to generate…
Sohcahtoa82 on HN
Attackers who know the rhyme scheme could brute force it more easily
From 2 comments
Doesn't it allow easier brute force?
worldsavior on HNIf they know you used this to generate it, yes. Also, the default of only 20 bits of entropy is not nearly enough, IMO. That's only ~1M options. If you're using this to generate…
Sohcahtoa82 on HN
Rhyme may not help much in practice for recall
From 1 comment
It probably depends on the reference point. If I now use 4 words (2*2 rhyming words) instead of passphrases with 2 words, then the password is more secure than before (even if…
onion90 on HN
Questions
Does the rhyme structure make brute force easier?
From 1 comment
Doesn't it allow easier brute force?
worldsavior on HN