4 ms·
Boom. I thought it was a requirement that every paper treating passphrases would reference the [xkcd cartoon](https://xkcd.com/936/ https://xkcd.com/936/), at l
by banku_brougham 11y ago
Boom. I thought it was a requirement that every paper treating passphrases would reference the [xkcd cartoon](https://xkcd.com/936/ https://xkcd.com/936/), at least in the citations list.
If your passphrase is a sentence that is found on the internet you are toast.
- jgalt212 11y agoI think you are overstating the case. You are only toast on this situation and many other situations defined as "easily guessable" if and only if the attacker has unlimited attempts at guessing your password. Most every system locks you out after X incorrect password entries, and X is cryptographically very small. (i.e. less than 10) As such, this would only be the case if the cracker has access to the raw password file and can make off-line guesses.