this post was submitted on 14 May 2024
554 points (100.0% liked)

Cool Guides

5357 readers
2 users here now

Rules for Posting Guides on Our Community

1. Defining a Guide Guides are comprehensive reference materials, how-tos, or comparison tables. A guide must be well-organized both in content and layout. Information should be easily accessible without unnecessary navigation. Guides can include flowcharts, step-by-step instructions, or visual references that compare different elements side by side.

2. Infographic Guidelines Infographics are permitted if they are educational and informative. They should aim to convey complex information visually and clearly. However, infographics that primarily serve as visual essays without structured guidance will be subject to removal.

3. Grey Area Moderators may use discretion when deciding to remove posts. If in doubt, message us or use downvotes for content you find inappropriate.

4. Source Attribution If you know the original source of a guide, share it in the comments to credit the creators.

5. Diverse Content To keep our community engaging, avoid saturating the feed with similar topics. Excessive posts on a single topic may be moderated to maintain diversity.

6. Verify in Comments Always check the comments for additional insights or corrections. Moderators rely on community expertise for accuracy.

Community Guidelines

By following these rules, we can maintain a diverse and informative community. If you have any questions or concerns, feel free to reach out to the moderators. Thank you for contributing responsibly!

founded 2 years ago
MODERATORS
top 50 comments
sorted by: hot top controversial new old
[–] DemBoSain@midwest.social 103 points 11 months ago (2 children)

Now imagine if you could use FIVE digits for something as important as a bank account.

[–] 9point6@lemmy.world 43 points 11 months ago* (last edited 11 months ago) (4 children)

Even more hilarious is the number of banks that have online login systems that have a maximum length of like 12 characters for the password.

and then the 2nd factor? Yeah that's just another password.

[–] sukhmel@programming.dev 14 points 11 months ago (2 children)

I've met ones that restrict passwords to be 6–8 characters

load more comments (2 replies)
load more comments (3 replies)
[–] techt@lemmy.world 17 points 11 months ago (2 children)

I use 8! My mom called me ridiculous for doing that :(

[–] Turun@feddit.de 50 points 11 months ago (1 children)

It is! How long does it even take to type in 40320 digits?!?

[–] tigeruppercut@lemmy.zip 8 points 11 months ago

I figure gotta be, at least 45 seconds!

[–] blx@lemmy.zip 8 points 11 months ago

She's right, 8 is not a very secure code.

[–] DaddleDew@lemmy.world 80 points 11 months ago

You can see that 19xx line continue at 20xx too

[–] puchaczyk@lemmy.blahaj.zone 71 points 11 months ago (1 children)

Now someone tell me which pin is the least common one so we all can use it to be safe.

[–] MystikIncarnate@lemmy.ca 9 points 11 months ago (2 children)

The ones that are showing black dots.

load more comments (2 replies)
[–] Gobbel2000@programming.dev 69 points 11 months ago (1 children)

The fact that every 4-digit pin is in this picture shows quite well how these are pretty easy to crack.

[–] CleoTheWizard@lemmy.world 33 points 11 months ago (2 children)

Idk why you would be cracking a PIN code. They aren’t really typically used for online security (and shouldn’t be). And if your attacker is targeting you, the PIN code isn’t meant to stop them.

What it does stop is you finding a random card on the side of the street and finding the nearest ATM to withdraw all of the cash from.

[–] bountygiver@lemmy.ml 9 points 11 months ago

which will lock the card after 3 tries, so even if you are using your birth year chances are they are not going to guess it

load more comments (1 replies)
[–] Bubs12@lemm.ee 44 points 11 months ago (2 children)

My bank just gave me a random PIN number. Choosing my own was not an option.

[–] SpaceNoodle@lemmy.world 15 points 11 months ago (5 children)

I'd forget that so hard.

I used to be able to memorize random sequences of numbers when I was young, but my brain doesn't do that tedious shit any more.

[–] Phoenix3875@lemmy.world 15 points 11 months ago (1 children)

Password manager is the way. It's recommended for all password related things anyway.

[–] techognito@lemmy.world 17 points 11 months ago* (last edited 11 months ago)

And good ones like bitwarden or keepass, not bad ones that get hacked almost yearly like lastpass

load more comments (4 replies)
load more comments (1 replies)
[–] jaybone@lemmy.world 42 points 11 months ago (1 children)
[–] AirDevil@lemmy.world 69 points 11 months ago (1 children)

NCC-1701 is the ship designator of the Enterprise from Star Trek

[–] jaybone@lemmy.world 10 points 11 months ago (5 children)

This occurred to me right after I posted. But are there that many ST fans?

[–] CentrifugalChicken@lemm.ee 21 points 11 months ago (1 children)
[–] MystikIncarnate@lemmy.ca 4 points 11 months ago
[–] AirDevil@lemmy.world 7 points 11 months ago (1 children)

It's pretty iconic and when you need to make a 4-digit pin quickly, it's something that stands out if you're a fan of the series. But as the heat map suggests, it may not be the most secure

[–] jaybone@lemmy.world 6 points 11 months ago

I’m a fan of the series but it would never occur to me to use that as a pin.

load more comments (3 replies)
[–] a_wild_mimic_appears@lemmy.dbzer0.com 28 points 11 months ago (6 children)

damn, 0451 is blocked from view :-(

[–] jaybone@lemmy.world 13 points 11 months ago (1 children)
[–] radicalautonomy@lemmy.world 7 points 11 months ago* (last edited 11 months ago)

*******

thats what I see

load more comments (5 replies)
[–] untorquer@lemmy.world 27 points 11 months ago (1 children)
load more comments (1 replies)
[–] Anafabula@discuss.tchncs.de 21 points 11 months ago (2 children)

That reddit post is a repost too. Actual source:

[–] e8d79@discuss.tchncs.de 52 points 11 months ago (3 children)

There is also the original 'original source'. It includes a version of the picture without the labels and the axis flipped.

[–] TonyTonyChopper@mander.xyz 14 points 11 months ago

this is so much better. Always read the x axis before the y axis

load more comments (2 replies)
load more comments (1 replies)
[–] xia@lemmy.sdf.org 19 points 11 months ago (1 children)

I wanna know what these black dots are. Forbidden numbers? Numbers the mind cannot guess?

[–] FiniteBanjo@lemmy.today 10 points 11 months ago* (last edited 11 months ago) (1 children)

Just the least used. 9805 for example. Mines dark orange and I wasn't even trying, I just made it a physical pattern rather than a number combo.

EDIT: You know, I bet 9805 is gaining popularity in countries that use the Day/:Month/:Year format. Aug 9th 2005 is the birthday of a fair number of adults, now.

[–] MystikIncarnate@lemmy.ca 7 points 11 months ago (1 children)

There's text over mine, I have no idea how I did. Judging by surrounding stuff, I think I'm ok. The numbers are fairly random.

The bank gave me the code and I just memorized it, and never bothered to change it.

Anyone have a version of this that doesn't have anything overlayed on it?

load more comments (1 replies)
[–] Rentlar@lemmy.ca 14 points 11 months ago (3 children)

If the bank is going to make me memorize both a unique 10+ character password and a 4 digit pin, of course I'm going to make a dead easy PIN.

load more comments (3 replies)
[–] MossyFeathers@pawb.social 8 points 11 months ago (3 children)

Here's a question, would it be more secure to choose a rare pin number or a pin number that is extremely common (ignoring obviously bad ones like 1234, 4321, meme numbers, numbers with four repeating digits, etc)?

Logic suggests that picking a rare number is better than a common one, because common ones are the ones that people would try first when attempting a bruteforce attack. Yet at the same time, personally if I was trying to brute force a pin, I'd start with obvious choices like 1234, 4321, four repeating numbers and meme numbers, and then switch to alternating between common-rare-common-rare if I was trying to brute force a pin number (starting with the most common and most rare). That'd mean the pin numbers that are the most secure when it comes to brute force attacks would be somewhere in the middle.

Granted, 4-digit pin numbers aren't very secure considering there are a maximum of 10,000 combinations, and social engineering attacks like phishing mostly bypass the need to brute-force the combination entirely. As such, the effort would likely be inconsequential and pointless outside of not picking ridiculously bad pins like 1111, but I'm still curious.

[–] dmention7@lemm.ee 42 points 11 months ago (1 children)

If your goal is to access a random account as quickly as possible, why would you ever try anything other than the next most common PIN?

It's not like Vegas where longer odds = higher payout. Less common PIN just means any given account is less likely.to use it, and therefore it's less likely to be correct on any given attempt.

If you look at it another way, the brightness of each square on that grid is the probability that there is a prize inside. If you wanted the most prizes as quickly as possible, picking the darkest avsilsble square is always a bad choice.

load more comments (1 replies)
[–] kryptonianCodeMonkey@lemmy.world 17 points 11 months ago* (last edited 11 months ago)

As you said, 4 digits is not enough to make something secure to a computer. 10,000 permutations is milliseconds of computation.The only reason it's at all secure for a credit card is because you're generally only using the PIN for in-person transactions where there are more practical limits on attempts (Narrator: "After 2 hours and 632 attempts, the cashier began to get suspicious..."), if not hard cut offs from the bank/processor for failed attempts. If we're being realistic, as long as your PIN isn't in the first 3-6 numbers they can try, it's probably secure enough in itself. Theives want low hanging fruit. Easier to try to social engineer your PIN then to manually brute force it. As long as you're avoiding the most obvious first attempt numbers, go ahead and use your dog's birthday or your childhood home's address. It's fine.

load more comments (1 replies)
[–] nucleative@lemmy.world 8 points 11 months ago (1 children)

White is most common and dark orange/grey are the least common? By how many standard deviations?

[–] over_clox@lemmy.world 7 points 11 months ago (1 children)

Very valid question, but honestly I hardly think it matters much in this context. It highlights people's patterns, and apparently humans are the worst to ask for random numbers.

On a side note, what's up with the hotspot at 5049?

[–] Infinite@lemmy.zip 5 points 11 months ago (5 children)
load more comments (5 replies)
[–] Tudsamfa@lemmy.world 6 points 11 months ago

Set all pins to 6806, got it.

[–] JoMomma@lemm.ee 6 points 11 months ago (1 children)

Where is 4269 in this chart?

[–] over_clox@lemmy.world 13 points 11 months ago (1 children)

Up 42 and to the right 69, duh.

Looks pretty low ranking if I'm seeing the graph right.

load more comments (1 replies)
[–] kryptonianCodeMonkey@lemmy.world 5 points 11 months ago* (last edited 11 months ago) (1 children)

There's a noticeable bias to using 10,11, or 12 as either the 1st and 2nd or the 3rd and 4th digits too, especially where the other two digits are lower. Like 11XX, or XX12. Wonder if there's a conscious reason for that or just a notable unconscious human bias for some number combinations?

[–] Shellbeach@lemmy.world 12 points 11 months ago (4 children)

They are birthdate MM/DD or DD/MM

load more comments (4 replies)
[–] Auzy@beehaw.org 5 points 11 months ago

Here in Australia, post code is also common

load more comments