Do you have adblock enabled?
If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(XKCD)   Accurate equine identifies the metal fastener of an electrochemical cell (7,5,7,6)   ( divider line
    More: Fail, maths, fasteners, Dinosaur Comics  
•       •       •

3787 clicks; posted to Geek » on 05 Nov 2013 at 10:24 AM (3 years ago)   |   Favorite    |   share:  Share on Twitter share via Email Share on Facebook   more»

Voting Results (Funniest)
View Voting Results: Smartest and Funniest

2013-11-05 11:49:02 AM  
1 vote:

Theaetetus: jfarkinB: Cozret: Misch: Ishidan: Accurate equine says what?

Correct Horse Battery Staple (7, 5, 7, 6)

Great against a brute force attack, not so good against a dictionary based attack.

Really? Even if you know that the password is composed of four words from a dictionary, you're not going to get anywhere. Remember, you're still producing a single hash from it. Dictionary attacks based on single-word vocabulary (including simple variants like upper/lowercase, digit substitution, etc.) are marginally practical at present. Expanding to four-word sequences would raise the size of your dictionary to the fourth power. Not going to happen anytime soon.

Actually, there's been some impressive cracking work using Wikipedia as a dictionary for source phrases.

Pass phrases can be more secure than passwords, but you have to use them properly.

English has grammar: some words are "supposed" to follow others, and "not supposed" to follow yet others. That's why you shouldn't use sentences as pass phrases: they decrease the entropy of the password, because you can cut out large parts of the dictionary at every step. You should jumble up random words instead.

The other big thing is that you need to make sure that at least one word on your list is not among the 1500 most common English words. This is hard if you're doing it in your head: people suck at picking random words. Better to use something like Diceware, which gives the advantage of giving you a legitimate reason to keep 5d6 on your desk.
2013-11-05 11:36:27 AM  
1 vote:

Misch: Ishidan: Accurate equine says what?

Correct Horse Battery Staple (7, 5, 7, 6)

I wonder how many people just use that phrase now as a password.

Maybe they also have the hint say "xkcd".

You know, to make the person who does xkcd cry.
2013-11-05 10:45:11 AM  
1 vote:
Accurate equine says what?
Displayed 3 of 3 comments

View Voting Results: Smartest and Funniest

This thread is archived, and closed to new comments.

Continue Farking

On Twitter

Top Commented
Javascript is required to view headlines in widget.
  1. Links are submitted by members of the Fark community.

  2. When community members submit a link, they also write a custom headline for the story.

  3. Other Farkers comment on the links. This is the number of comments. Click here to read them.

  4. Click here to submit a link.