I wonder if I’m more technically savvy as a millennial, though. My kids are clueless about computers despite genuine effort on my part, and I’m not sure if that’s a fair representation of kids their age. I was able to do so much with computers at 15 years… it’s more than a little unnerving seeing them scratch their head at an iPad occasionally, or have NO clue how they’d do almost anything an app does for them within Apple’s ecosystem if they had to do it themselves. None of it seems possible to them.
But maybe most kids were the same when I was that age. I was too busy programming and modelling or animating in 3D Studio Max to know what was normal.
RAS 'syndrome' is just an example of redundancy in language, which is often actually useful for communication. There's no reason to insist on avoiding it.
Interesting graph, but I find it strange there are these really unpopular numbers like 0738. I can't see the reason why it would be significantly less popular than similar ones, i.e. 0739 or 0758
I think people are biased towards PINs with only cardinal directions + 45 degree diagonals - or in other words the angles traced out by the digits should always be a 45 degree multiple.
I never got why 4 digit PINs were so common. Not only does requiring more digits make it harder to guess by brute-force, it also prevents people from making frankly stupid PINs like the date of their birth year.
Is that a problem that needs solving? Most interfaces for entering a user-generated PIN, like an ATM, are heavily monitored and rate limited. It's not like backend databases are routinely encrypted with these.
As others have said, increasing the length would do little to increase security in most cases since the usual response will be to repeat digits. Plus the current system seems to be working pretty well empirically.
This reminds of the password rotation policies that some companies insist on using, despite the evidence that they are a waste of time. In practice they are an "Increment the last digit of your password" policy.
Even at 8 digits people could still use their birthdays. I think there's a tradeoff between PIN size and fraction of the population that will feel comfortable picking a number with no significance. I'd speculate that in a world where every PIN has to be 16 digits that almost everyone would just use 2 or 4 concatenated dates.
Readit News
It’s from a discussion of how various age groups might be more or less savvy when it comes to selecting a PIN.
I wonder if I’m more technically savvy as a millennial, though. My kids are clueless about computers despite genuine effort on my part, and I’m not sure if that’s a fair representation of kids their age. I was able to do so much with computers at 15 years… it’s more than a little unnerving seeing them scratch their head at an iPad occasionally, or have NO clue how they’d do almost anything an app does for them within Apple’s ecosystem if they had to do it themselves. None of it seems possible to them.
But maybe most kids were the same when I was that age. I was too busy programming and modelling or animating in 3D Studio Max to know what was normal.
https://www.datagenetics.com/blog/september32012/index.html
This is an instance of RAS syndrome: https://en.wikipedia.org/wiki/RAS_syndrome
I think a very relevant part of the article is “A limited amount of redundancy can improve the effectiveness of communication”
The prevalence of “PIN number” suggests it’s a useful redundancy.
I'd hazard a guess that asking for an 8 digit pin will see lots of people just repeat the first 4 digits again.
As others have said, increasing the length would do little to increase security in most cases since the usual response will be to repeat digits. Plus the current system seems to be working pretty well empirically.
This reminds of the password rotation policies that some companies insist on using, despite the evidence that they are a waste of time. In practice they are an "Increment the last digit of your password" policy.