Towards Standardizing Comparisons of Password Guessability

Name: Towards Standardizing Comparisons of Password Guessability
Uploaded: 2016-12-14
Duration: 34 min 7 s
Description: PW - Towards Standardizing Comparisons of Password Guessability - Sean M. Segreti & Blase Ur Passwords BSidesLV 2015 - Tuscany Hotel - August 05, 2015

BSides Las Vegas · 201534:0723 viewsPublished 2016-12Watch on YouTube ↗

Speakers

Sean M. Segreti Blase Ur

Tags

CategoryResearch

TopicPassword Security

StyleTalk

About this talk

PW - Towards Standardizing Comparisons of Password Guessability - Sean M. Segreti & Blase Ur Passwords BSidesLV 2015 - Tuscany Hotel - August 05, 2015

Show transcript [en]

Hello, Iron Geek here. Unfortunately, I'm getting nothing but ground noise during most all this talk, and I'm not sure what exactly happened. I'm putting it up for archive reasons, but unfortunately pretty much it's complete audio loss until near the end. Hopefully that didn't happen to the later ones in this particular track. I'm sorry. I'm going to go ahead and start. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit

of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little

bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a

little bit of a fan of the old-school style. I'm a little bit of a fan of the old-school style. I'm a little bit of a fan of ... ... ... ... ... I'm going to go ahead and start the recording. I'm going to go ahead and start the recording. I'm going to go ahead and start the recording. I'm going to go ahead and start the recording. I have a lot of friends who are very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very

very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very

very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very very I think that's a good question. I think that's a good question. I'm going to go ahead and start the recording. I think that's a good point. I think that's a good point. I think that's a good point. and I'm not sure if you know what

I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm

not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if

you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not sure if you know what I mean. I'm not I'm a little bit of

a nerd, but I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of

a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a

nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm a little bit of a nerd. I'm I'm going to do a little bit of a dance. . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm

going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going

to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to

be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little bit scared of the fact that I'm going to be a part of this. I'm a little I'm going to start with the first one. I'm sorry. Thank you. I'm going to do a little bit of a walk. I'm going to go ahead and start the call. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a

doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a

doctor. I'm a doctor. I'm a doctor. I'm a doctor. I'm a doctor and I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to

be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to

be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so excited to be here. I'm so I'm going to go ahead and start the recording. Welcome to the new year. This is

our first year of the year. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are

very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very

excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited to be here. We are very excited

to be here. We are very excited to be here. We are very excited to be here. We are very excited to I'm going to go ahead and start the recording. I'm going to go ahead and start the recording. I'm going to go ahead and start. I'm going to go ahead and do a little bit of a quick test. I'm sorry. We will be doing a lot of research on the future of the United States. We will be doing a lot of research on the future of the United States. We will be doing a lot of research on the future of the United States. We will be doing a lot of research on the future of the United States.

We will be doing a lot of research on the future of the United States. We will be doing a lot of research on the future of the United States. We will be doing a lot of research on the future of the United States. We will be doing a lot of research on the future of the United States. We will be doing a lot of research on the future of the United States. We will be doing a lot of research on the future of the United States. We will be doing a lot of research on the future of the United States. We will be doing a lot of research on the future of the United States.

I'm going to go ahead and start the recording. I think that's a good question. I think that's a good question. I think that's a good question. I'm a little bit of a nerd. I'm sorry. um *Gunshots* I'm going to be a little bit more active, like, you know, a little bit more active. I'm going to be a little bit more active. ... ... ... ... ... I don't think I have any issues with that at all. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with

that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with

that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I have a lot of experience with that. I think I'm going to call it a day. I'm going to call it a day. I'm going to

go ahead and do that. I'm going to go ahead and start the recording. I'm not sure. I'm going to do a little bit of a walk through the program.

I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student.

I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior high school student. I'm a senior I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student

of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student of the University of Denver. I'm a student

I'm doing the other way around. I'm going to go through the other way around. I'm going to go through the other way around. I'm going to go ahead and start the recording. I'm going to go ahead and do that. So, I'm really glad that we have you here. So, if you feel you can really get a hold of me, I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good

thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good

thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's a good thing. I think that's I think that's a good point. I think that's a good point. I'm going to be a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more

of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more

of a, you know, a little bit more of a, you know, a little bit more of a, you know, a little bit more of a, you know I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and

to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to

be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be

able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here and to be able to share with you all this information. I'm very happy to be here Thank you. Do you find significant discrepancies between types of people that are younger and other people between men and women in how different platforms? Hey there. Can you tell me roughly how large the dataset is and how much data I would have to drag down to my production server to be able to

do that? I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to

be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for

over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part of this community that has been

a part of our community for over 50 years. I'm happy to be a part of this community that has been a part of our community for over 50 years. I'm happy to be a part So on your rules for the JCR, do you actually use the same amount of rules as on the practice reports? Okay, first of all, thank you so much for making that pass to get the quality service because I've written it all paper and you have to have sort of standardized base and unfortunately, I mean the default options are really limited and all of them are available. So I've always felt bad about So thank you so much for sort of like, you know,

an actual fan thing to start using that. One thing I would recommend I would have is maybe post some of the common data sets and maybe, you know, along with rules so you don't have to front-end it and lock you like 10 million times or everyone has to support it. Submit it because I think that's what everyone can't really use in the dictionaries. Also, do you run an online pack against each set you submit or do you have some sort of thing like reverse manual where you look at the password and say, "Okay, this is probably word and digit." It takes tens of thousands of guesses. John feels that you can do that. So we assign that for the entire guessing

attack. I'm not sure what I'm doing here. Just be honest with me. I don't think I'm doing anything. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be

honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be honest with you. I'm just going to be

haven't looked at my past weeks time off, I'm climbing past the strength from two years ago. Please do that. I use guestility and it takes a little bit of time. So, on the stability stuff, you see that every, because there's an implied resource constraint that all of the different tracking algorithms are trying to get as far as they can, given, you know, something like 10 to 13 or 10 to 14 or whatever. If you, and the stuff you said about some of the different ordering things and John Ripper, you know, so suppose you iterate an n10 to 5, it takes you back to more like n9, nb, ns, n7. How stable are the, do you have

to back to the actual values? you know, to make sure that the conclusions of which distributions are better. If the distributions cross at one resource constraint, one might be better than the other, and the distribution might reverse and the function might be perfect. I agree. What is your care, what does care mean to you? Absolutely. I get the great word of the word. I'm positive in that area and I look out for that. Okay, so a wonderful course then for these guys. Thank you so much. I'm going to say this, I seriously hope that you will continue doing some of the research in the past years, even after. That's important. There's nothing else. There's nothing better.

Towards Standardizing Comparisons of Password Guessability

Related talks