3 ms·
Technically, for an uninformed attacker, this is just one more level of entropy added to your password (multiply the combinations by 65635 - and then more in pr
by MayeulC 9y ago
Technically, for an uninformed attacker, this is just one more level of entropy added to your password (multiply the combinations by 65635 - and then more in practice, as you have to account for the fact that this has a low probability of occurring from the viewpoint of the attacker).
It just really is a part of your password (albeit one that can be guessed easily by a more dedicated attacker, just like the username).
- throwaway613834 9y agoRight :)
- marcosdumay 9y agoIt is not plain added entropy. You can't multiply the complexity (or add the entropy) because there is a signal when the attack makes a partial guess (he gets the openssh prompt). The added entropy is a bit harder to calculate, but unless your password has 16 bits of entropy¹, it will round pretty well to zero. 1 - Why TF would you run a ssh server that accepts passwords anyway? But nearly everybody I have seen that thinks changing the port is a good form of protection also sees no problem on accepting them.