this post was submitted on 29 May 2024
462 points (98.3% liked)
Technology
58303 readers
10 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
The password auto generated by his software wallet used the date/time as the "random" seed for the password, so knowing the rough date he created it they were able to get it to spit out the same password again. So not very secure at all.
A little too "pseudo" and not enough "random." :)
It all depends on the value of what you're trying to secure, and if an attacker knows the value of what's in the account, and if the attacker has access to hints about the password you used to narrow down the possibilities. The researchers knew all of that info and they still didn't want to bother trying to crack the password until they found an additional way to narrow down the possibilities even further.
There's no such thing as perfect security. A lock only needs to be strong enough to make it not worth breaking into for what's in there