3 ms·
An interesting bit from the linked ElcomSoft article: >Brute force attacks became not just faster, but much smarter as well. The user’s existing passwords are
by upofadown 4y ago
An interesting bit from the linked ElcomSoft article:
>Brute force attacks became not just faster, but much smarter as well. The user’s existing passwords are an excellent starting point. These passwords can be pulled from the user’s Google Account, macOS, iOS or iCloud keychain, Microsoft Account, or simply extracted from the user’s computer. The user’s existing passwords give a hint at what character groups are likely used:
So if the victim used portions of that "longer than 20 characters" password in their other passwords, the amount of work required to crack the LUKS password would be much reduced.
- Brian_K_White 4y agoNot just subsets/supersets, but similar concepts and patterns.
- swapfile 4y agoThis is why you let a computer choose. By doing that you end up forcing the attacker to brute force, which we all know is mathematically unfeasible given enough entropy.