Hacker News new | past | comments | ask | show | jobs | submit login
The password “ji32k7au4a83” has been seen over a hundred times (twitter.com)
118 points by DoreenMichele 3 hours ago | hide | past | web | favorite | 40 comments





This is using the zhuyin keyboard which most likely means Taiwanese users since Taiwan is probably the sole user of the zhuyin keyboard.

Typing that out on a zhuyin keyboard gets you: ㄨㄛˇㄉㄜ˙ㄇㄧˋㄇㄚˇ

In Pinyin that is wo3 de mi4ma3

Or in English "my password"


Related story: For some weird reason, I memorized the serial key for a very popular software (I must be fifteen then). Even today, I can recite the 25-letter key without a hitch. And I have used its first ten letters as a password to one of my accounts. Guess what? The password has been used 4000+ times before [1]. It's hard to digest the fact that there are at least a thousand people in the world who did the same thing.

[1]: https://haveibeenpwned.com/Passwords


I've done the same, though I never used it as a password. Back around 2000 or so I was experimenting a lot with hardware configurations and I had input my Windows 98 SE key so many times during reinstalls I ended up memorizing it unintentionally. Even today, nearly 20 years later, I can recall it perfectly. It actually came in handy a couple of years ago when I built a P-III retro gaming machine out of scavenged parts; I found a Windows 98 CD at work collecting dust on a shelf, installed it, and instinctively entered the correct key without missing a character.

Word of warning, if you use an ad/content blocker like uBlock Origin then HIBP may give up on its k-anonymity mechanism and just sends your password to their server in cleartext.

Ensure you specifically permit their JS loaded from cloudflare.com, and check network traffic using a test password first.


Why does this happen?

It seems like a huge oversight to not detect ad blockers and let the user know that their password is being transmitted in plaintext if that's true...


It's not cleartext if you're loading over HTTPS which is enforced on this site.

Is your password "fckgw rhqq2"?

Holy shit! Now that I have changed the password, can you please tell me how did you guess that?

Because bunch of us memorized fckgw rhqq2 yxrkt 8tg6w 2b7q8 for the very same reason back in early 2000s

Lol. Warez. It's been a long time.


Yup. One of the most famous longer numbers out there.

:)

It's probably the most famous software license key, it can even be found on Wikipedia: https://en.wikipedia.org/wiki/Volume_licensing#Leaked_keys

Sorry to scare you! I didn't think you were still using it. Honestly, it was the first thing that came to mind in terms of "culturally important serial keys"

I'm only guessing, but this could provide a clue: https://www.google.com/amp/s/www.urbandictionary.com/define....


I laughed out loud when I saw the sponsored domain registrar links down the page advertising “FCKGW-RHQQ2-YXRKT-8TG6W-2B7Q8.travel” and other TLDs.


It's a pretty well-known leaked key. And then you said exactly what part of it you used. Not the smartest move.

It's like saying "My password is the first 10 characters of a really popular book about wizards" and expecting no one to figure it out.


I didn't know the well-known part. Besides, I was assuming that this was only of the multiple, multiple keys. But, it's funny how popular it is, and that so many had a reason to memorize it.

I am also extremely curious! (I did not have this password, but would love to know why it was so common?)

It's the first few sections of product key for one of the original warez scene releases of the windows XP Pro gold master ISO.

It's common enough it's in Urban Dictionary.

https://www.urbandictionary.com/define.php?term=fckgw-rhqq2-...


I too spent most of my youth re-installing Windows on various machines. :D

Windows XP..

dgk7b 9rwyw

bound by the power of cerealz


> for a very popular software

You aren't fooling no one, might as well just say it.


I did the same, mine was qqwd7...

I memorized my first library card number -- the library would call and leave a message containing the number when a book came in. 1000102772901.

I had to replace the card a few times, but only the first number stuck.


Same thing with my first debit card. All the rest never stuck

From the linked Twitter thread: It's the Chinese equivalent of "password": 我的密码

Password would be 密码. 我的密码 is "my password".

In China they just use pinyin, so I was baffled as to how ji32k7au4a83 could represent 我的密码. Turns out it's the keys you press if you have Taiwanese input.


Speaking of good passwords, I wrote a passphrase generator once that I still use to this day. You can have a copy of it if you’d like. The README explains all there is to know about it but feel free to ask any questions anyone might have.

https://github.com/ctsrc/Pgen


Let's consider the scale for a moment. How may people? (Billions, yes?) How many accounts? (Min: 10x those billions).

Or as I like to say when I see stupidity online or on TV: There are close to seven billion people in the world, dumb shit is bound to happen.

p.s. You're assuming that those first 10 characters are random and unique. But perhaps, not really. Maybe it's two 5 char strings of some other significance?


Let this thread be a reminder for everyone to use a password manager.

Yeah IMO the only "good" passwords are those hard to remember even by yourself.

Personally most non-trivial passwords of mine were generated by 'pass'.


Searching a little (it's easy because it's unique) and then automatically translating 2014 article titled:

"How to set up a safe and easy to remember password"

reveals:

http://www.netqna.com/2014/05/do-not-set-up-weak-password.ht...

"4. Using Chinese input method:

For example, the phonetic input method of the four" (I guess in Chinese, op. acqq) "words "My Password" is the combination of "ji32k7au4a83"."

Sure, safe. Just for you and everybody who read that. No problem at all.

And some user of some gaming(?) site used it for his username:

https://web.poe.garena.tw/account/view-profile/ji32k7au4a83


Here's the entire translated version

Using the above principles, how can we design a good password?

Tip 1: Replace characters with ones that sound the same

For example, you can replace the letter e in succeed with the number 1 {note this sounds the same in Mandarin}, so that it becomes succ11d, which is easy to remember and combines numbers and letters.

Tip 2: Replace characters with ones that look the same

For example, you can replace the o in dog with 0 and it becomes d0g. It mixes letters and numbers.

Tip 3: fill with special symbols

For example, the above password d0g is not long enough, so you can add special symbols at the end, e.g. d0g!(!(!(!(!(!(, it will be easy to remember, but hackers will need 12,340 centuries to crack it.

Tip 4: Using Chinese input method

For example, the phonetic input method of the four words "My Password" is the combination of "ji32k7au4a83". At first glance, it is a random combination, but it is meaningful.

Pretty hilarious all around, anyone checked if d0g!(!(!(!(!(!( is in the database too?


>Pretty hilarious all around, anyone checked if d0g!(!(!(!(!(!( is in the database too?

I just checked and... looks like it's not been seen by HIBP:

>Good news — no pwnage found!

>This password wasn't found in any of the Pwned Passwords loaded into Have I Been Pwned. That doesn't necessarily mean it's a good password, merely that it's not indexed on this site. If you're not already using a password manager, go and download 1Password and change all your passwords to be strong and unique.


LOL you can't be serious

Probably the same guy reused it a hundred times on a hundred different bitcoin exchanges that all got hacked. (tongue in cheek I hope)



Applications are open for YC Summer 2019

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact

Search: