So... what's all this about XKCD's password scheme not being ok? I found the argument pretty compelling, in that even if you presumed the attacker knew how you

So... what's all this about XKCD's password scheme not being ok? I found the argument pretty compelling, in that even if you presumed the attacker knew how you generated your password, there would be too much entropy to work out what it was. I'm going to do some quick googling about this. edit: oh goodness, this appears to be a holy war, https://security.stackexchange.com/questions/62832/is-the-oft-cited-xkcd-scheme-no-longer-good-advice https://security.stackexchange.com/questions/62832/is-the-of... I'll just plant my flag and wish the rest of you luck, use a password manager.