HD_Picard
4 HN mentions · mentioned in 4 months, 2021–2023
0:41 · 185K views · Mar 29, 2017
A short Star Trek TNG clip from 'Brothers' in which Data uses a lockout code with an unusually long, secret-sounding sequence.
Used as a joke or a tongue-in-cheek reference in security and authentication threads.
4 comments from Hacker News
This is bad and insecure. Look at this: this video Same thing with “pay with your face” they tried in China. They all are susceptible to replay attacks. It is garbage! The only secure way to authorize actions is to have a device in your possession which you unlock with your password and/or biometrics — and use THAT device to sign interactive challenges or ZK-SNARKS. The device could stores keys in a secure enclave, but regardless, the keys should never leave the device. The ability to export private keys (as with ethereum and bitcoin wallets) is insecure, too. Look how 1password does it: local key plus master password. Far better than LastPass (master password only). Also you should have notifications whenever a new device authenticates, or when you are trying to establish new recurring payments at a great rate than you would allow otherwise. Then you need to confirm from other devices. That is the scheme that works universally and the further you depart from that, the more ridiculous hacks you get.
That might explain why Data's lockout code in that particular TNG episode has so many "7" on it :) One, seven, three, four, six, seven, three, two, one, four, seven, six, Charlie, three, two, seven, eight, nine, seven, seven, seven, six, four, three, Tango, seven, three, two, Victor, seven, three, one, one, seven, eight, eight, eight, seven, three, two, four, seven, six, seven, eight, nine, seven, six, four, three, seven, six. Lock. this video
From my understanding, the only real way to create a password is to make it really, really long. Like, "Sometimes 10 people will get together on Friday night. Wow!" Or whatever you want. Makes it easy to remember. Personally I just usually string a bunch of random numbers and upper/lower/special characters - 40 of them. Just like this: this video
I will not be silent until authentication works like this: [LINK] Or until it works like this: this video And then logging in will look exactly like this: [LINK]