Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> It must be

While it's almost the exact opposite of [0-9]{4,6}, it's extremely annoying too.

This is fairly secure for usual website password, but the requirements would throw this away:

    $ openssl rand -base64 9
    TjB3tbYOo1wz
Okay, it's fine when you generate a random password for each site (then store it somewhere), but if you're generating password from some one-side function from a site URI, then you have a problem.


Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: