The one letter password guessing still has relevance today in systems vulnerable to a timing attack. If the timing of password validation is affected by the val

The one letter password guessing still has relevance today in systems vulnerable to a timing attack. If the timing of password validation is affected by the valid-prefix length (which it would be if the password validation is a simple strcmp()) then you can use that to brute-force the password character-by-character.