cupslab / password_meter

This project implements a data-driven password meter. Its effects on password security and usability were evaluated in the following publication: http://www.blaseur.com/papers/CHI17meter.pdf and a demo is available at: https://cups.cs.cmu.edu/meter/
Other
185 stars 40 forks source link

abcdefghijklmnopqrstuvwxyz is a strong password #7

Open AgamAgarwal opened 7 years ago

AgamAgarwal commented 7 years ago

The utility judges abcdefghijklmnopqrstuvwxyz to be a strong password even though it clearly has a pattern. I understand that since this meter is data-driven, it cannot be expected to identify such patterns. Anyhow,

  1. Is it feasible to improve the model to understand (such and other) patterns along with those in the training data?
  2. Does it actually make sense for a password meter to have this capability?