5 ms·
Incorrect: It's 171k^4 and 255^8. (which works out to 8.55E20 and 1.78E19)
by drcode 15y ago
Incorrect: It's 171k^4 and 255^8.
(which works out to 8.55E20 and 1.78E19)
- kijinbear 15y agoActually, since you normally can't use anything but characters in the 0x20-0x7E range, the 8 char password has much less entropy: 95^8 ~= 6.63E15. I love the backtick in my passwords. If a website accepts it and doesn't give me any issues, it's a decent indicator of basic security.
- drcode 15y agoRight- I was just correcting the dude's math :-)
- zobzu 15y agohey it was an honest typo
- pbhjpbhj 15y ago>the 8 char password has much less entropy: 95^8 ~= 6.63E15 // Most of the word usage is going to be limited though too. testyourvocab.com put the average at 27k I think. We're looking for words one can remember easily so the word pool is going to be a lot lower - 15000^4 ~= 5E16 FWIW.
- pak 15y agoYep, and that's assuming 8 random bytes from extended ASCII. The other point of the article was that nobody actually makes a password from random characters because words are easier to remember. And I think it's disingenuous to suppose people will enter alt-codes and that nonprintable characters would be allowed, so assuming MENSA-quality users with internal random number generators, we get 95^8 ~= 6.6E15, a clear loss of entropy.
- zobzu 15y agoyeah thats correct