Skip to content
DevMeme
3453 of 7590
Security Post #3787 · source on Telegram

Choosing a name that meets modern password complexity requirements

Description

A four-panel comic strip from 'CommitStrip' depicting a conversation between a doctor and a man. In the first two panels, the man, with a wild expression, dictates a nonsensical string of characters, including mixed cases, numbers, and symbols, to the skeptical doctor. In the third panel, the doctor confirms the full name, 'yJ%X6PL@'z,' and the man agrees enthusiastically. The final panel reveals the man is naming his young nephew (who is happily holding a puppy), and when the doctor questions if the child will remember it, the man confidently replies, 'He'll thank me when he's older.' This comic satirizes the increasingly absurd complexity requirements for modern passwords, analogizing them to naming a child. The joke resonates with senior developers who have experienced the friction between stringent security policies and user experience, where 'secure' often becomes synonymous with 'unusable' and 'unmemorable'

Comments

20
Anonymous ★ Top Pick I tried to name my son using our corporate password policy. He's now 'Hunter2!', but every three months I have to call him 'Hunter2@' and he's not allowed to be named any of his previous 12 names
  1. Anonymous ★ Top Pick

    I tried to name my son using our corporate password policy. He's now 'Hunter2!', but every three months I have to call him 'Hunter2@' and he's not allowed to be named any of his previous 12 names

  2. Anonymous

    Bold move naming the kid “yJ%X6PL@’z”; he’ll ace every entropy meter - right up until the hospital’s legacy EMR truncates at 8 bytes and collides him with “hunter2”

  3. Anonymous

    After 20 years of sanitizing user inputs and escaping special characters, you realize the real vulnerability was letting developers name their children - somewhere a DBA is crying over a WHERE clause that needs to handle little Bobby'); DROP TABLE students;--

  4. Anonymous

    This is what happens when you let a developer who's spent too many years fighting with regex validators, SQL injection prevention, and Unicode normalization name a human being. The kid's going to need a prepared statement just to introduce himself at school, and good luck getting that past any government database that still thinks VARCHAR(50) without special characters is perfectly adequate for the 21st century

  5. Anonymous

    Naming the kid yJ%X6PL@'z is a full-stack integration test: IAM rejects the %, the legacy DB escapes the ', SSO parses the @ as an email, and the ETL quietly nulls the record

  6. Anonymous

    Threat modeling level: name the dog yJ%X6PL@'z so every ‘first pet’s name’ KBA is OSINT-proof - assuming the vet’s regex lets the apostrophe through

  7. Anonymous

    This identifier's so cryptic, even the family monorepo needs a dedicated grep alias to reference it

  8. ẞonny 4y

    Me rn

  9. @VolodymyrMeInyk 4y

    X Æ A-12

  10. Deleted Account 4y

    Explain

    1. @Artkash 4y

      A few years later, when puppy leaves this world, it would be easier to forget ...just as your regular password

      1. Deleted Account 4y

        Then the dad failed, cause some websites don't allow using apostrophe

        1. @Artkash 4y

          Not in "secret question" section ¯\_(ツ)_/¯

      2. @QutePoet 4y

        😲

  11. @flex_ape 4y

    Lol, when he grows up, that password will be too weak

  12. @JoseAngelSanchez 4y

    "What was your first pet name?"

    1. @affirvega 4y

      Ohhhhhhhhhhhh, that makes sense!

    2. @okutasan 4y

      Genius

  13. @RiedleroD 4y

    ol' Pl@zie

  14. @Magilarp 4y

    /wajihzesplaz/

Use J and K for navigation