undefined | Better HN

0 pointsbonestamp25y ago0 comments

I suspect they know they have a lot of vulnerabilities and they don't want to encourage people to poke around. I mean, their passwords aren't even case sensitive. This is also probably why they fired you as a customer, to discourage anyone else from even trying.

0 comments

3 comments · 1 top-level

recursive5y ago· 2 in thread

Case-sensitive password gets you <1 bit of entropy per password character. That doesn't sound like that big of a deal.

tpxl5y ago

So a password with 10 characters is 1000 times less secure if you don't use case sensitivity. That's a big deal in my eyes.

recursive5y ago

" times less secure" isn't really well defined. Entropy is usually measured in log-space.

And in practice, it's less than one bit, since not all characters are letters.

j / k navigate · click thread line to collapse