> Not really clever. Format strings have a fairly restricted format; that one can't have all that many bits of entropy. I fully agree that now is a great time

> Not really clever. Format strings have a fairly restricted format; that one can't have all that many bits of entropy. I fully agree that now is a great time to brute-force every ssh server found on the Internet with randomly generated valid format strings. However, did you know it before this password was published? I think it was a novel idea.