Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

It's unfortunate that Haskell's Haddock wasn't Haddoc or Hadoc. "Haddock" made the most sense to me as a name for a blathering password generator (with those nods to the Marx Bros. and Hergé). I've named the command-line utility "ha-gen", though, to avoid collisions.

And "H:Bb1wwa2mpf" may be more secure than a similar-length haddock password, but its pseudo-acrostic nature is much less digestible to your average user. Meanwhile, with a few potential modifications I outlined, haddock would still be more memorable _and_ just as secure:

http://news.ycombinator.com/item?id=537562



The point's to remember the phrase, not the password. :-) The password is trivially reconstructible from the phrase.

Actually - since any good programmer won't put a maximum length on their passwords, I wonder if it'd be better to get users into the habit of picking really long phrases as passwords. Type in "Haddock: Built because I want webapps to make passwords fun" in the password prompt. Maybe that'll just take too long to input though, each time you want to login.


I have vague memories of acrostics I formed for study in college...and not-so-trivially muddling them ;)

I still agree with you that this kind of phrasal munging is a good method, but I also think haddock has the slight, memorable edge :)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: