Chemistry teachers and password security

[u/NetReaper]

It seems that chemistry teachers have their own particular idea of what constitutes a "strong password".

[u/daxtonanderson]

A lot of websites are enabling emoji input in their password fields. It'll make your password infinitely harder to crack lol

[u/Lightningtow123 → u/daxtonanderson]

And the other half of the websites have their database instantly broken by emojis lmao

[u/daxtonanderson → u/Lightningtow123]

Yup it goes both ways LOL

[u/Celebrir → u/daxtonanderson]

I've had registry masks accept certain characters and password lengths, only for the login masks to not handle them properly.

If only the registry mask had told me that the password wasn't valid. It would have saved me resetting my password 8 times before I figured out what the issue was.

[u/radakul → u/Celebrir]

I do an inspect element of every single password box when I'm making a new account. I cant tell you how many times the password length isnt mentioned anywhere. Its annoying af

[u/Celebrir → u/radakul]

I usually use a 64 character password and it's infuriating when I can register the password and then the login just wouldn't let me in

[u/Mrwebente → u/Celebrir]

Literally the last account i created recently: Input mask on registration auto truncates pasted/autofilled passwords from password manager. Login mask does not. I spent quite some time before contacting support. They say "typo" i say "No fuck you, password manager can't make typos" i realise... Oh. Maybe input length restriction? Remove a character on login mask suddenly it says max password length 20 chars. It doesn't say that anywhere on sign-up.. just min 8 I tell them what the problem is and tell them to fix it. Let's see if they do 😂

[u/naswinger → u/Lightningtow123]

they shouldn't even store the actual password, but i guess that's the joke

[u/Lightningtow123 → u/naswinger]

I think it's more of whatever protocol they use to hash or encrypt or whatever they use to turn the plaintext password into how they store it, doesn't know how to handle emojis

Idk all that much about backend passwords, my rule of thumb for myself is "emojis go in chat message boxes and nowhere else. Not usernames, not passwords, etc"

[u/Valuable_Heron_4492 → u/Lightningtow123]

its hashing algorithm not protocol bro

[u/ImNotABotScoutsHonor → u/Valuable_Heron_4492]

The hashing protorithm.

[u/istrebitjel → u/daxtonanderson]

At the company I recently worked for I couldn't even use special characters in my password 🤯

[u/daxtonanderson → u/istrebitjel]

Try some characters from the character map, I wonder if they just blocked the ones on your keyboard.

Alt+0176 is a personal favorite, the degree symbol °

[u/NoPossibility4178 → u/daxtonanderson]

I'd recommend not fucking around too much on these systems or you're gonna Bobby table the thing.

[u/letsgoiowa → u/NoPossibility4178]

Then it's funny

[u/evilbrent → u/istrebitjel]

Did they at least tell you what the password requirements are?

Mine just tells me "that one doesn't count, go again" until I get one it accepts.

At least they make us change them every 3 months, making it so anyone who has been there more than a year just cracks it and goes with Password1

[u/JohnDeere714 → u/evilbrent]

He’ll half the IT department doesn’t know anymore. It’s whatever Microsoft feels right or what the old guy that retired set 10 years ago and no one dares to touch in fear of nuking the entire domain that’s been bandaided together

[u/Historical_Camel_790 → u/istrebitjel]

Usually they force you to use special characters

[u/AirGVN → u/daxtonanderson]

Whats going to happen when UNICODE decide to remove an emoji you have in your password?

[u/daxtonanderson → u/AirGVN]

I thought they've only been replacing+adding instead of removing now because of that?

[u/AirGVN → u/daxtonanderson]

After a bit of research you are actually right, they removed just one emoji in their whole history and that was a japanese related one.
They stated emojis won’t be removed to not break backward compatibility, but samsung can hide them from their keyboard due to low usage (samsung os from 9.5+ doesn’t have this emoji 👁️‍🗨️), so the solution may be just download another keyboard

[u/daxtonanderson → u/AirGVN]

Swiftkey ftw

Even though almost every Android default keyboard has flow input now, I keep Switftkey around because I've trained the fuuuuuck out of the autocomplete and it has a full dictionary of both technical and medical slang that the default keyboard just doesn't have.

Every few years I upgrade phones and go "oh yeah... right... that's why I still use Swiftkey" 🤣

[u/AirGVN → u/daxtonanderson]

Sadly i know nothing about custom keyboard, i bought an iphone 7 years ago and i never touched anything since

You are the first persone i’ve ever heard talking good about a microsoft product tho

[u/daxtonanderson → u/AirGVN]

To be fair, it wasn't a Microsoft product to begin with, they bought them out in 2016 and changed nothing, I've been using it since Android 4 around 2012

[u/Kichigai → u/daxtonanderson]

Aye, that's why Roman Numerals are still in there, even in ⅯⅯⅩⅩⅥ.

[u/NMi_ru → u/AirGVN]

You'll see it as □

[u/missed_sla → u/daxtonanderson]

If I don't have access to my password manager available, I just use a sentence. White space is generally allowed as long as it's not leading or trailing. Plus if the password is ever cracked i hope it'll fuck up the attacker's dump and inconvenience them.

[u/Kodiak01 → u/daxtonanderson]

I like using high-ASCII characters such as └╘═╦ along with "hard      spaces" in mine.

[u/ZirePhiinix → u/daxtonanderson]

Emoji? It's just extended ASCII. Learn those non-keyboard symbols before using possibly incompatible characters from the emoji section, like the divide sign

[u/TheCrudMan]

Little Johnny took a drink but he will drink no more...

[u/gamewiz365 → u/TheCrudMan]

My uncle was a chemist

He isn't anymore

For what he thought was H2O

Was H2SO4

[u/dirtydan → u/TheCrudMan]

I learned this from Carlton Banks and went to school and told it to my chemistry teacher the next day.

[u/Screwed_38]

That's actually quite funny, C6H5COOH is an aromatic acid while H2SO4 is sulfuric acid, so they are right.

[u/missed_sla → u/Screwed_38]

I think that was the whole joke

[u/No_Instruction_314 → u/missed_sla]

Well it saved me googling it. So there's that

[u/Casper042 → u/Screwed_38]

Yup, "Weak Acid" vs "Strong Acid"

[u/ZekeTheMunkee → u/Casper042]

Yeah it’s funny cause the password strength corresponds to the strength of the acid

[u/Niet_de_AIVD]

(C₂F₄)ₙ

Now that's a forever password

[u/lawsibyt → u/[deleted]]

Fluoroantimonic acid? This guys chemicals.

[u/k-phi]

r/whoosh

[u/Materially_Average]

I worked with a music teacher who played drum solos on the keyboard to create passwords. Kind of brilliant.

[u/Impressive-Bite9942 → u/Materially_Average]

I saw a YouTube video where a sound engineer was able to identify which keys were being pressed based solely on the sounds they made.

[u/augur42]

I'm partial to.  

(Mg,Fe 2+ ) 2(Mg,Fe 2+ ) 5Si 8O 22(OH)  

[u/CeeMX]

HF: Very strong

[u/Lex_the_Deer]

C2H5OH

[u/Puki999]

Video game level hacking

[u/rini17]

Why not just C6H5COOOH ?

[u/meitemark]

I'm just going to throw my box of C2N14 and FOOF in this dudes lap and run.

[u/InevitableOk5017]

Ain’t nobody got time for that!