Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
ekanes
on Dec 13, 2010
|
parent
|
context
|
favorite
| on:
Why don't we expire passwords on the web?
Couldn't someone deduce that his hotmail password is abcho123?
Edit: If they compromised one of his other accounts...
mitko
on Dec 13, 2010
|
next
[–]
yes, they could, if you use something that simple, AND they know you are using such a scheme. I used that just as an example. In reality you'd use something a little bit more complicated raising the bar for them by a considerable amount.
TheSOB88
on Dec 13, 2010
|
prev
[–]
Maybe with that naive formula.
Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
Edit: If they compromised one of his other accounts...