4 ms·
My question is, is 10k good enough? Wouldn't it be better to check against more? 50k?
by infogulch 9y ago
My question is, is 10k good enough? Wouldn't it be better to check against more? 50k?
- gwern 9y agoPresumably more is always better, but there's a very long tail of passwords so the hit rate will drop off a cliff, and now you're storing 5x as much data for increasingly questionable benefit.
- codinghorror 9y agothe problem is once you get to 10+ char passwords the common password list gets really tiny