3 ms·
This post also fails to take into account people's exposure to fiction. My vocabulary may be limited, but many of my passphrases use nouns/concepts/slang that a
by drbawb 8y ago
This post also fails to take into account people's exposure to fiction. My vocabulary may be limited, but many of my passphrases use nouns/concepts/slang that are drawn from video games, novels, movies, etc. Some of these works (authored by family, friends, and myself) aren't even published. I reckon the chance of these "words" being included in some cracker's dictionary is quite close to zero.
Also as you point out their analysis of the entropy of random words is quite uncharitable. It fails to account for any sort of punctuation, capitalization, etc. Is my password "correct horse battery staple" or "correct Horse, battery staple!" or "CORRECT HORSE! Battery staple.", etc. There is a lot of entropy inherent in crafting a phrase.
- norswap 8y agoThe point being that even so it's already better while simultaneously being easier to remember (because indeed, what did I capitalize again?).