That's not too amazing if we're cracking a leaked password database. In that case, we generate passwords and try them against every (hash, salt) pair in the da

That's not too amazing if we're cracking a leaked password database. In that case, we generate passwords and try them against every (hash, salt) pair in the database. We can usually crack 60 percent of a database this way, and more if we use AI driven cracking (PassGAN, 2017). It makes sense to try variants of "netflix{birthday}" early on, since that uncovers a significant portion of the database. Your mom would have just been unlucky to be part of that low-hanging cohort.