These are 17 of the worst, most cringeworthy Google AI overview answers:

  1. Eating Boogers Boosts the Immune System?
  2. Use Your Name and Birthday for a Memorable Password
  3. Training Data is Fair Use
  4. Wrong Motherboard
  5. Which USB is Fastest?
  6. Home Remedies for Appendicitis
  7. Can I Use Gasoline in a Recipe?
  8. Glue Your Cheese to the Pizza
  9. How Many Rocks to Eat
  10. Health Benefits of Tobacco or Chewing Tobacco
  11. Benefits of Nuclear War, Human Sacrifice and Infanticide
  12. Pros and Cons of Smacking a Child
  13. Which Religion is More Violent?
  14. How Old is Gen D?
  15. Which Presidents Graduated from UW?
  16. How Many Muslim Presidents Has the U.S. Had?
  17. How to Type 500 WPM
  • slurpyslop@kbin.social
    link
    fedilink
    arrow-up
    18
    arrow-down
    1
    ·
    edit-2
    7 months ago

    Steps 2 and 3 of your method already make it way too hard to remember

    Just pick like 6 random, unconnected, reasonably uncommon words and make that your entire password

    Capitalize the first letter and stick a 1 at the end

    The average English speaker has about 20k words in their active vocab, so if you run the numbers there’s more entropy in that than in your 11 character suggestion.

    Alternatively use your method but deliberately misquote it slightly and then just keep it in its full form.

    • vividspecter@lemm.ee
      link
      fedilink
      English
      arrow-up
      6
      ·
      7 months ago

      Ideally, do the picking with a random word generator too, since humans are bad at randomly picking anything.

    • Lvxferre@mander.xyz
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      3
      ·
      edit-2
      7 months ago

      TL;DR: your statements are incorrect and you’re being assumptive.

      Steps 2 and 3 of your method already make it way too hard to remember

      Step 2 is “hard”? Seriously??? It boils down to “first letter of each word, as it’s written, plus punctuation”.

      Regarding step 3, I’ll clarify further near the end.

      Just pick like 6 random, unconnected, reasonably uncommon words and make that your entire password

      That’s a variation of the “correct horse battery staple” method. It works with some caveats:

      1. Your method does not scale well at all. If you try to harden it further, by using more words, you hit Miller’s Law. My method however scales considerably better because there’s some underlying meaning (for you) on what you’re using to extend the password further.
      2. Even in English, a language that typically uses short words, your method requires ~30 characters per password. Larger and less dense passwords are actually an issue because some systems have a max password size, like Lemmy (60chars max). My method however uses less characters to output the same amount of entropy.
      3. The least common the word, the more useful for a password, and yet the harder to remember. With synonyms and near-synonyms making it even harder. Typically less common words are also longer, making #2 even more problematic.

      The average English speaker has about 20k words in their active vocab, so if you run the numbers there’s more entropy in that than in your 11 character suggestion.

      I’ll interpret your arbitrary/“random” restriction to English as being a poorly conveyed example. Regardless.

      The suggestion is the procedure. The 11 characters password is not the suggestion, but an example, clearly tagged as such. You can easily apply this method to a longer string, and you’ll accordingly get a larger password with more entropy, it’s a no-brainer.

      For further detail, here’s the actual maths.

      • Your method: 20k states/word (as you specified English). log₂(20k) = 14.3 bits of entropy. For six words, as you suggested, 86 bits. The “capitalise the first” and “add 1 to the end” rules do nothing, since systematic changes don’t raise entropy.
      • My method: at least 70 states/char (26 capital letters, 26 minuscule letters, 10 digits, ~8 punctuation marks); log₂(70)=6.1. Outputs the same entropy as yours after 14 chars or so.

      Now, regarding step #3. It does increase a little the amount of entropy. But the main reason that it’s there is another - plenty systems refuse passwords that don’t contain numbers, and some even catch on your “add 1 to the end” trick.

      EDIT: I did a major rewording of this comment, fixing the maths and reasoning. I’m also trying to be less verbose.

      • slurpyslop@kbin.social
        link
        fedilink
        arrow-up
        3
        arrow-down
        1
        ·
        edit-2
        7 months ago

        Step 2 is “hard”? Seriously???

        I don’t know how you’re meant to remember that “Works” and “Mighty” are capitalized

        In most other quotes, the only capitalization occurs once at the start, so it doesn’t add any meaningful entropy.

        If you try to harden it further, by using more words

        Yours doesn’t scale due to step 3.

        On the other hand, much like battery staple, it’s pretty easy to make up a visual or story in your head to connect the words.

        Also, why would you need to scale this past 6 words? At that point it’s already more likely that your password is compromised via a keylogger or similar than anything else.

        Even in English, a language that typically uses short words, your method requires ~30 characters per password.

        I’ll accept this as a downside of the method, but honestly a website that limits your password character length to under 30 is probably doing some other weird shit that isn’t good.

        Also, the only time you should really be using this method is if for some reason you don’t want to use a password manager. Not many scenarios like that that also limit characters.

        yet the harder to remember

        I feel like the exact opposite is true? Pretty easy to remember “defenestrate”. Much easier than remembering which m turns into a 3 in your method.

        The 11 characters password is not the suggestion, but an example,

        I’m aware how examples work. It’s 11 characters long and already too hard to remember.

        • Lvxferre@mander.xyz
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          3
          ·
          7 months ago

          I don’t know how you’re meant to remember that “Works” and “Mighty” are capitalized

          Refer to step 1, please: pick a quote that you know by heart. And you’re still confusing the example with what it exemplifies.

          At this rate it’s rather clear that you’re unable to parse simple sentences, and can be safely ignored as noise.

          • slurpyslop@kbin.social
            link
            fedilink
            arrow-up
            3
            ·
            7 months ago

            pick a quote that you know by heart

            so step 1 is actually “learn a long, obscure quote by heart” because obviously it can’t be a common quote or it completely breaks the method, and the only quotes you’re likely to know are common

            you’re right this is so easy

            you’re still confusing the example with what it exemplifies.

            In most other quotes, the only capitalization occurs once at the start, so it doesn’t add any meaningful entropy.

            At this rate it’s rather clear that you’re unable to parse simple sentences,

            somebody’s a little spicy over the fact that they gave terrible advice :(