5 ms·
Don't have password patterns, problem solved. Knowing that my password is 20 random characters of all possible symbols will not reduce your search space by any
by thenickdude 10y ago
Don't have password patterns, problem solved. Knowing that my password is 20 random characters of all possible symbols will not reduce your search space by any significant amount.
- Mithaldu 10y agoStill useful, means there's no point in checking any < 20, which halves the search space. Or, on the outside, can be useful to abort any attempts at bruteforce by way of cost evaluation and move on to another target.
- OJFord 10y agoMy goal when choosing a password (generator) typically isn't "what will tie up an adversary for the longest, preventing them from moving on to attack someone else". Call me selfish, but if my password is known to be too tough to bother, so Eve moves on to someone else's weak password, great.
- Mithaldu 10y agoIf you know your password is too tough to bother, then having people bash away at it is no cost to to, and benefit to everyone else.
- thenickdude 10y agoHalves the search space, so in other words it only reveals 1 bit of information about the password, a completely insignificant amount. For a 64-symbol alphabet, a 20 character password is 120 bits long, so you'll still have to brute force 2^119 passwords on average. The sun will swallow the Earth before then.