If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(XKCD)   Accurate equine identifies the metal fastener of an electrochemical cell (7,5,7,6)   (xkcd.com) divider line 3
    More: Fail, maths, fasteners, Dinosaur Comics  
•       •       •

3771 clicks; posted to Geek » on 05 Nov 2013 at 10:24 AM (23 weeks ago)   |  Favorite    |   share:  Share on Twitter share via Email Share on Facebook   more»



Voting Results (Funniest)
View Voting Results: Smartest and Funniest

2013-11-05 11:49:02 AM
1 votes:

Theaetetus: jfarkinB: Cozret: Misch: Ishidan: Accurate equine says what?

Correct Horse Battery Staple (7, 5, 7, 6)

Great against a brute force attack, not so good against a dictionary based attack.

Really? Even if you know that the password is composed of four words from a dictionary, you're not going to get anywhere. Remember, you're still producing a single hash from it. Dictionary attacks based on single-word vocabulary (including simple variants like upper/lowercase, digit substitution, etc.) are marginally practical at present. Expanding to four-word sequences would raise the size of your dictionary to the fourth power. Not going to happen anytime soon.

Actually, there's been some impressive cracking work using Wikipedia as a dictionary for source phrases.


Pass phrases can be more secure than passwords, but you have to use them properly.

English has grammar: some words are "supposed" to follow others, and "not supposed" to follow yet others. That's why you shouldn't use sentences as pass phrases: they decrease the entropy of the password, because you can cut out large parts of the dictionary at every step. You should jumble up random words instead.

The other big thing is that you need to make sure that at least one word on your list is not among the 1500 most common English words. This is hard if you're doing it in your head: people suck at picking random words. Better to use something like Diceware, which gives the advantage of giving you a legitimate reason to keep 5d6 on your desk.
2013-11-05 11:36:27 AM
1 votes:

Misch: Ishidan: Accurate equine says what?

Correct Horse Battery Staple (7, 5, 7, 6)


I wonder how many people just use that phrase now as a password.

Maybe they also have the hint say "xkcd".

You know, to make the person who does xkcd cry.
2013-11-05 10:45:11 AM
1 votes:
Accurate equine says what?
www.pikabit.net
 
Displayed 3 of 3 comments

View Voting Results: Smartest and Funniest

This thread is closed to new comments.

Continue Farking
Submit a Link »






Report