<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 2014-10-15, 5:14 AM, Shane Tomlinson
wrote:<br>
</div>
<blockquote cite="mid:543E3AF5.2090708@mozilla.com" type="cite">On
04/10/2014 02:54, Ryan Feeley wrote:
<br>
<blockquote type="cite">As its a hash of your master password,
it's safe to increment your
<br>
master password by one as an exception.
<br>
</blockquote>
<br>
Here's an argument against this idea from Square:
<br>
<br>
<a class="moz-txt-link-freetext" href="https://diogomonica.com/posts/password-security-why-the-horse-battery-staple-is-not-correct/">https://diogomonica.com/posts/password-security-why-the-horse-battery-staple-is-not-correct/</a>
<br>
</blockquote>
<br>
Great post, although it makes no mention of password solutions like
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
SuperGenPass [1] or One Shall Pass [2] mentioned above.<br>
<br>
<meta http-equiv="content-type" content="text/html;
charset=ISO-8859-1">
“In JavaScript, 1SP hashes a structure including your email address
your universal passphrase (which you choose and mustn't forget),
then hashes the results with a host (such as "github.com"), and your
settings for that host. If you enter the same inputs on another
computer, 1SP will yield the same password.”<br>
<br>
If you're referring to the Password Playground in general, we’re
addressing his primary concern which is "how dictionary-attack
resistant” the passwords are. I had proposed blocking common
passwords a while ago, and still support that idea.<br>
<br>
Until there are free, reliable password managers available, we
should extend a helping hand for the Firefox Account password
because of its importance (it's likely the password that protects
your Saved Passwords).<br>
<br>
There are some passwords that should be memorable but need not be
generator-strength (like your laptop that someone needs physical
access too) and even some that should be memorable and stronger
(like your Apple ID/Google Account, and I would argue your Firefox
Account).<br>
<br>
The Password Playground is a tool that helps people practice making
a strong memorable password for the Firefox Account (not other
sites).<br>
<br>
Ryan<br>
<br>
[1] <a class="moz-txt-link-freetext" href="http://www.supergenpass.com/">http://www.supergenpass.com/</a><br>
[2] <a class="moz-txt-link-freetext" href="http://oneshallpass.com/">http://oneshallpass.com/</a><br>
<div style="display: none;" id="Output" class="Field">o7QvvXTmgbo7QvvXTmgbo7QvvXTmgb</div>
</body>
</html>