passwords and trust and randomness

3 views
Skip to first unread message

Joshua Thorp

unread,
Jun 14, 2012, 2:01:46 PM6/14/12
to dis...@sfcomplex.org

I use one of the password vault applications and it has a random password generator.

So what am I to make of this password it just gave me?

3r5g6D7tS9UxWeakTeav

Shrug it off as meaningless random chance? 

--joshua

Gary Lee Nelson

unread,
Jun 14, 2012, 2:08:45 PM6/14/12
to dis...@sfcomplex.org
monkeys typing?

--
You received this message because you are subscribed to the Santa Fe Complex "discuss" group.
To post to this group, send email to dis...@sfcomplex.org
To unsubscribe from this group, send email to
discuss+u...@sfcomplex.org
For more options, visit this group at
http://groups.google.com/a/sfcomplex.org/group/discuss

Joshua Thorp

unread,
Jun 14, 2012, 2:26:54 PM6/14/12
to dis...@sfcomplex.org
Yes monkeys typing,  I know that is what I am supposed to think and to some extent I must…

This goes to humans having a hard time telling what random should look like:
14159267
or
11111138

which is more random?  Depends on the process that created the string I guess.  Neither of these count cause they came from my feeble head that doesn't do random.  

I think most words wouldn't bother me in a random string,  but 'Tea' makes me think of Douglas Adams's gods -- beware the god of entropy...  http://en.wikipedia.org/wiki/The_Long_Dark_Tea-Time_of_the_Soul

--joshua

Gary Lee Nelson

unread,
Jun 14, 2012, 2:34:09 PM6/14/12
to dis...@sfcomplex.org

Greg Sonnenfeld

unread,
Jun 14, 2012, 3:24:51 PM6/14/12
to dis...@sfcomplex.org
WeakTea?

I've heard that expression before. Its obviously hackers intercepting
your password and commenting on the applications security level.

:P


Greg Sonnenfeld

“Two h's walk into a bar. The first one says, "What is this? Some kind
of physics joke?”

Jon Bringhurst

unread,
Jun 14, 2012, 3:36:19 PM6/14/12
to dis...@sfcomplex.org
Considering that weaktea is the name of a block cipher, and that the odd
bits start after the 96th bit boundary (which has some odd properties...
2^5*3), I'd be willing to bet that this is a bug in the password generator.

It's probably paranoid, but personally, I wouldn't trust passwords
generated on that machine with the entropy source that's being used in
this case.

-Jon
Reply all
Reply to author
Forward
0 new messages