Of course, the flip side of this is that we're veering off into attacks where you're targeting one specific person and know a bit about how they've chosen their

Of course, the flip side of this is that we're veering off into attacks where you're targeting one specific person and know a bit about how they've chosen their password. If you want to mount such an attack, fine, but most of us are dealing with the much-more-common threat of someone who gets a file or a database of hashed passwords and wants to crack them all in one go.