search

Bitwise-01 / Passwords

Get or generate a password list
MIT License
119 stars 79 forks source link

Different approach to generating passwords #1

Open Castorps opened 5 years ago

Castorps commented 5 years ago

Hello, I want to suggest a possible change in the way keywords (names, birthdays, etc.), which are used for generating passwords, are gathered. I think instead of asking for very specific details in the terminal, you could just let the user write relevant information into text documents (different files for numbers, names, birthdays, etc.). This would increases the possibilities of the keywords used (favourite artist, song, zodiac, etc.) and would encourage a more general approach to generating passwords using certain types of information (which I think would also decrease the amount of parsing that has to be done).

Example files names: names.txt full_names.txt birthdays.txt numbers.txt

What do you think?

Bitwise-01 commented 5 years ago

You have to assume the user knows very little about computers, and or the user is very lazy.

Also, wouldn't the password list just get bigger? You have to assume the user is using a slow internet and act afford to test a million passwords very quickly. The only way to reduce the size of the list is to generate very specific passwords.

Castorps commented 5 years ago

The user would just have to write keywords he/she associates with the target, I don't think that's very complicated and entering less keywords would result in less passwords. You could include an estimate to inform the user how many passwords the program will generate.

If a user is crazy about an artist then it would make sense to include passwords derived from his/her name. The only way to do that at the moment is to use the artist's name for either the pet or the spouse. Just my thoughts though.

Bitwise-01 commented 5 years ago

The user would have to create or append into multiple text files for each target. This can be a bit slow to do and cause the user to become lazy about the program.

Castorps commented 5 years ago

Didn't think the program was intended to be used for bulk password list generation. You could theoretically use a while loop to let the user enter as many keywords as they want in the terminal, that doesn't require extra files and also supports my idea. Only issue is that the terminal design gets a bit more complicated (in my opinion not too complicated).

Bitwise-01 commented 5 years ago

Yeah I can try that.

Castorps commented 5 years ago

Nice, I'll also give it a shot.

Bitwise-01 commented 5 years ago

Wanna have a race?

Castorps commented 5 years ago

I'll look into it in the next couple of hours, but got an update idea for one of my repositories as well. Sry ;-)

Bitwise-01 commented 5 years ago

Sorry about the delay, I was updating another repo. What do you think about the update?

Castorps commented 5 years ago

Looks good to me. I've also proposed my version as pull request, but mine produces bigger password lists than yours (appropriate for me, but maybe not for the standard user).