| 04:28.04 | *** join/#utah bad_surfer (~bad_surfe@72.12.245.130) |
| 12:17.57 | *** join/#utah RuShan (~RuShan@2600:100e:b11c:5daa:685c:b016:6789:6eaf) |
| 15:36.15 | *** join/#utah voldemortensen (~Adium@216.50.142.194) |
| 16:10.50 | *** join/#utah kim27 (~kim27@unaffiliated/kim27) |
| 17:06.35 | *** join/#utah jima (jima@fedora/jima) |
| 18:03.30 | *** join/#utah Vibrasian (~vibrasian@c-76-23-60-71.hsd1.ut.comcast.net) |
| 18:05.35 | *** join/#utah programmerq (~jefferya@unaffiliated/programmerq) |
| 18:13.58 | romanovic | haha. https://www.youtube.com/watch?v=g1OhUT1Y1QI "Facebook auto-made a chipper slideshow of my near-fatal car accident. I was in the green 4Runner. My iPhone and Apple Watch was fine." |
| 18:26.31 | jholtom | heh |
| 18:28.04 | eightyeight | heh |
| 18:28.11 | eightyeight | hah |
| 18:28.13 | eightyeight | :) |
| 18:28.15 | eightyeight | ? |
| 18:28.17 | eightyeight | ~brave++ |
| 18:35.36 | jlp_znc | hah |
| 18:35.54 | jlp_znc | my stupid password maker gets 56 bits of entropy on your password entropy tester, eightyeight |
| 18:37.09 | eightyeight | heh |
| 18:37.27 | jlp_znc | https://github.com/jlp78/dotfiles/blob/master/bin/scripts/mkpw if you want to see it |
| 18:37.33 | eightyeight | so, i don't know if you saw my tweets, but zxcvbn doesn't like to award for than 3-bits per character |
| 18:37.37 | eightyeight | on average |
| 18:37.50 | jlp_znc | algorithm is pretty simple, it runs through the dictionary, picking words six letter long or longer |
| 18:38.14 | jlp_znc | each one it picks it selects either the front of the word or the back of the word, and three or four characters per word |
| 18:38.20 | eightyeight | so, `foS&n$&xoTc' has about 72-bits of entropy, but zxcvbn reports 36 |
| 18:38.38 | jlp_znc | then it joins them with a randomly selected "separator character" (punctuation or digits) |
| 18:38.56 | eightyeight | runs |
| 18:39.01 | jlp_znc | and randomly capitalizes one letter per part (default is two parts, but I usually use four these days) |
| 18:39.22 | eightyeight | i had a `leet-speak' generator, but i removed it |
| 18:39.39 | eightyeight | i want to readd it, but i want the characters chosen to be random, and replaced with random look-alike chars |
| 18:39.51 | jlp_znc | the idea is you can remember the beginnings and ends of words easier than just a random glob of characters. |
| 18:40.01 | eightyeight | yeah |
| 18:40.15 | eightyeight | since putting my generator together, i've become a huge fan of english words |
| 18:40.29 | jlp_znc | they are easy to remember that's for sure |
| 18:41.04 | eightyeight | in fact, i want to create 131,072 word list (exactly 17-bits entropy per word), so i can create a 4 word passphrase for 68-bits |
| 18:41.20 | eightyeight | but playing with it in javascript, it's _laggy_, at best |
| 18:41.38 | eightyeight | i could create a javascript animation on the `Generate' button to show it's working, which i may do anyway |
| 18:41.54 | goozbach | heh |
| 18:41.56 | goozbach | hah |
| 18:41.59 | goozbach | :) |
| 18:42.01 | goozbach | ? |
| 18:43.08 | eightyeight | jlp_znc: so what's the output? <pwd> => <???> <md5crypt> |
| 18:43.51 | jlp_znc | yeah, standard unix crypt hash (both two character and 12 character) |
| 18:44.08 | eightyeight | oh. i see |
| 18:44.14 | jlp_znc | I used to drop them directly into the shadow file... don't do that too much any more. should probably make that not the default. |
| 18:44.46 | eightyeight | so, just picking 2 words from /usr/share/dict/words? |
| 18:45.00 | jlp_znc | it still allows you to supply a password and salt and it will show the encrypted password for you |
| 18:45.12 | jlp_znc | 2 words is the default, but I usually use --num-parts=4 now |
| 18:45.17 | jlp_znc | (probably should make that the default, too) |
| 18:45.55 | eightyeight | yeah. you're only getting about 16-bits per word |
| 18:46.05 | eightyeight | so two words is only getting you at about 32-33 bits |
| 18:46.17 | eightyeight | but then you're also replacing characters randomly, which increases that entropy |
| 18:46.53 | jlp_znc | well, I'm upcasing randomly |
| 18:46.58 | eightyeight | <word><separator><word> |
| 18:47.02 | eightyeight | so that separator helps |
| 18:47.10 | jlp_znc | I'm selecting either the start or end of the words. yeah, the separator is random as well |
| 18:47.38 | eightyeight | 20 possible choices for the separator |
| 18:47.59 | jlp_znc | I originally wrote it before there were password keeper gizmos (like lastpass, etc.) specifically to make it easy to pick new passwords for web sites I really don't care about :-) |
| 18:48.19 | eightyeight | about 37.5 bits |
| 18:48.36 | jlp_znc | it also tries to make sure that the part of the word it selected isn't also a real word |
| 18:48.59 | jlp_znc | (like if it picked the word "lansing" and wanted to use the last four letters, it couldn't because "sing" is also a word) |
| 18:49.57 | eightyeight | oh. you're restricting word length to 6+ characters, then truncating |
| 18:50.01 | jlp_znc | originally, it took great pains to make sure the password it selected was eight characters long, too, since that was all that was significant (long ago) |
| 18:50.20 | jlp_znc | should probably relax some of those restrictions and always use four letter parts |
| 18:50.37 | spangborn | CorrectHorseBatteryStaple |
| 18:50.44 | spangborn | That's my password for everything |
| 18:50.47 | jlp_znc | you've already memorized it! |
| 18:50.59 | spangborn | RIP my bank account |
| 18:51.01 | eightyeight | that doesn't change things significantly, actually |
| 18:51.11 | eightyeight | (on my default installed dictionary) |
| 18:51.21 | eightyeight | 99171 -> 87940 words |
| 18:52.21 | eightyeight | jlp_znc: so, the random capitalization. how is it decided? could all characters in each result be uppercase? or just a few? |
| 18:52.50 | eightyeight | rand()? |
| 18:52.53 | eightyeight | tsk tsk |
| 18:53.27 | jlp_znc | just one per part |
| 18:53.30 | jlp_znc | :-) |
| 18:53.46 | jlp_znc | I never said it was supposed to make great passwords |
| 18:55.01 | jlp_znc | could use Math::Random::Secure, I suppose |
| 19:01.45 | eightyeight | so, i'm guessing then that the upper bound of entropy on your generator, by default is ~ 47-bits |
| 19:02.54 | eightyeight | i'm going to start writing a node module for my generator (per the recommendation of spangborn) soon |
| 19:03.14 | spangborn | Yesssssss |
| 19:03.15 | eightyeight | default run will give the 9 ouputs, like on the web page |
| 19:22.10 | jlp_znc | everything you want to know about the new iPhone 7: http://bit.ly/2cz3Q1j |
| 19:46.33 | eightyeight | https://i.imgur.com/MFnedCw.png |
| 19:49.16 | *** join/#utah aarobc (~aarobc@208.64.91.82.static.utbb.net) |
| 20:15.35 | jlp_znc | heh |
| 20:15.37 | jlp_znc | hah |
| 20:15.47 | romanovic | how many hours can a car alarm go off until you are justified in taking some further action? potentially with a hammer or crowbar? |
| 20:16.17 | unum | .0001 |
| 20:16.27 | jlp_znc | first time my wife and I went to vegas, we were walking down the strip and encountered a car that was parked taking up about three parking spaces |
| 20:16.27 | romanovic | there's a car out in the lot that's been going off for > 2 hours. email with pictures and license plate has been sent to every email address in the building. nobody's taking care of it |
| 20:16.51 | jlp_znc | it's alarm was sounding, and it would say (in a generated voice) "you have been detected by 'viper', please move away from the vehicle" |
| 20:17.01 | jlp_znc | then it would sound a horn/siren for a bit, and then it would stop. |
| 20:17.04 | eightyeight | i think it's cute people still think car alarms work |
| 20:17.13 | jlp_znc | and then someone from the crowd would walk up to the car and smack it. |
| 20:17.17 | jlp_znc | and it would do it again. |
| 20:17.20 | jlp_znc | and again. |
| 20:17.33 | eightyeight | heh |
| 20:17.34 | eightyeight | hah |
| 20:17.36 | eightyeight | :) |
| 20:17.38 | eightyeight | ? |
| 20:17.40 | jlp_znc | (I think the ultimate goal was to try to run the battery down, but sadly I don't think that happened) |
| 20:18.10 | eightyeight | yeah. i would imagine it would take hours to kill the battery |
| 20:18.22 | eightyeight | probably longer than the people being away from the vehicle |
| 20:19.01 | jlp_znc | thing was, it was parked way away from the building... right at the edge of the parking lot adjacent to the strip sidewalk. |
| 20:19.51 | eightyeight | i wonder if you could amplify and focus the output, back at the car, and shatter the windows |
| 20:26.44 | jlp_znc | wants an LRAD |
| 20:32.29 | jlp_znc | kicks on his little desktop fan |
| 20:32.50 | jlp_znc | spicy chili is getting to me a little. :-) |
| 20:46.59 | spangborn | https://i.reddituploads.com/4babaa38f9f242b683568e2096cc2d80?fit=max&h=1536&w=1536&s=d625d0d88e5e80727b29cc7c126b2300 |
| 20:47.16 | spangborn | TIL UTA's TVMs run Windows |
| 20:50.17 | jfindlay | why do software have stupid names anyway, like windows, srsly? |
| 20:54.19 | eightyeight | yeah |
| 20:54.28 | jlp_znc | oops |
| 20:54.29 | eightyeight | like `funtoo', and `libreoffice' |
| 20:54.51 | eightyeight | `blag' anyone? `gnewsense'? |
| 20:55.28 | harleypig | jlp_znc: https://www.youtube.com/watch?v=8nTnIEstkHY |
| 20:57.05 | jlp_znc | spangborn: encountered at SLC airport: https://goo.gl/photos/ANtGcRqNtirYDeYT8 |
| 20:58.40 | jlp_znc | harleypig: heh heh "you can stand as close as you want. in fact, take the car! |
| 20:59.48 | jlp_znc | why have I never seen this movie? |
| 20:59.51 | harleypig | One of the stupidest movies to come out of the 80s, but I liked it. |
| 21:00.04 | harleypig | Huh ... 91, but that's close enough. |
| 21:00.59 | harleypig | You should also see I Come In Peace. |
| 21:02.21 | jlp_znc | licks tip of pencil, prepares to take notes |
| 21:11.53 | levi1 | eightyeight: There are easier ways to shatter a car's windows, and I don't think using the excuse that you were using the car alarm's sound to shatter them would help you in court. :) |
| 21:12.12 | eightyeight | it's not about getting by in court |
| 21:12.28 | eightyeight | it's about finding absurdly complex but entertaining engineering solutions |
| 21:12.46 | jlp_znc | "well, officer, I was just walking by with my sound reflector/amplifier. I had no idea that the car was going to choose that moment to activate it's alarm." |
| 21:13.07 | eightyeight | like training pigeons to poop on cars when the alarm goes off (xkcd-style) |
| 21:17.21 | levi1 | Well, in the case of pigeon poop, you can't just make that happen with a rock. :) |
| 22:33.12 | *** join/#utah neanderslob (~quassel@c-50-168-247-73.hsd1.ut.comcast.net) |
| 22:40.31 | *** join/#utah asoc (~pi@71-35-238-203.slkc.qwest.net) |
| 23:19.45 | *** join/#utah Vibrasian (~vibrasian@c-67-177-55-187.hsd1.ut.comcast.net) |
| 23:21.06 | *** join/#utah shalkie (shalkie@theadamsresidence.net) |
