Comments (3)
+1
Fixing would require first including the phonetic (or ICAO or NATO or whatever your favorite community calls it) alphabet, which begs the question: Whilst we're at it, what other spelling alphabets should get included?
from zxcvbn.
I'll follow up (over a year later) by suggesting that, even at the risk of causing some false hits, whenever the string formed by taking the first letter of each of a sequence of words can itself be found in a weak-password dictionary, then the entire test string should marked as not strong. So any sequence of words whose first letters form some recognizable string (like abcd, egbdf, sohcahtoa, csgtl) would be considered weak.
from zxcvbn.
I think the right solution is to allow custom dictionaries, such that those that want to match the phonetic alphabet can add it to their bundle of dictionaries. custom dictionaries, keyboard layouts, and other internationalization features are on my roadmap.
i haven't seen many passwords that use the phonetic alphabet, or password crackers that iterate through ICAO/NATO instead of top password / english dicts, but if there's evidence to the contrary, it would make sense to include into the default dicts / matching.
from zxcvbn.
Related Issues (20)
- Password File
- Electron app
- Code security
- Bypass password File HOT 2
- Creating Electron app
- README.md
- please delete this issue
- Password entropy property HOT 1
- Very slow for certain inputs
- recent year regex is... out of date. HOT 2
- Different score for the password strength for the same string between TypeScript and Java versions HOT 5
- 密码强度检测 HOT 1
- Just saying thanks
- Dead "Dropbox Blog Post" URL at demo site
- Possible DOS when run server side
- A ReDoS vulnerability exists in matching.coffee HOT 10
- Microsoft Edge component version showing wrong HOT 1
- Feature request: provide options for smaller builds
- Recommended successors? HOT 1
- I created a pure Swift version of this - how do I get it listed here?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from zxcvbn.