On Thu, May 04, 2017 at 03:16:31PM +0200, Jason A. Donenfeld wrote:
:There is a non-zero probability that a RNG will output the complete works
:of Shakespeare.

and a non zero chance that it will generate "password1234" that
doesn't mean accepting that is a good idea though, one also has to
consider likely attack strategies.

the example given is likely fine, but if you randomly get a password
that you think is bad, regeneration is always an option.

-Jon

:
:--
:Sent from my telephone.
:
:On May 4, 2017 13:56, "Matthieu Weber" <[email protected]> wrote:
:
:On Thu 04.05.2017 at 09:35:24PM +1000, Jens Tröger wrote:
:> I know that passwords are generated by pwgen, which is considered a
:> strong generator (right?) but today it produced a password with
:> consecutive repetitions: #9d:$_r{""yww4{k?}.i'^P}z
:
:Randomness sometimes generates repetition. If you want to filter out the
:passwords with repetitions, you are effectively reducing the number of
:possible passwords, therefore making it (slightly) easier to crack.
:
:> Not sure if this is an issue per se? Can I ignore this in the future?
:
:I would say it's not an issue, especially with this long a password as
:the one above.
:
:Matthieu
:--
: (~._.~)        Matthieu Weber - [email protected]        (~._.~)
:  ( ? )                 https://weber.fi.eu.org/                  ( ? )
: ()- -()           public key id : 0x85CB340EFCD5E0B3            ()- -()
: (_)-(_) "Humor ist, wenn man trotzdem lacht (Otto J. Bierbaum)" (_)-(_)
:
:_______________________________________________
:Password-Store mailing list
:[email protected]
:https://lists.zx2c4.com/mailman/listinfo/password-store

:_______________________________________________
:Password-Store mailing list
:[email protected]
:https://lists.zx2c4.com/mailman/listinfo/password-store


-- 
_______________________________________________
Password-Store mailing list
[email protected]
https://lists.zx2c4.com/mailman/listinfo/password-store

Reply via email to