3 ms·
Facebook's is a little better - you can't disregard case entirely. Blizzard just cut the search space by a lot. Then again, it would be pretty difficult to bru
by tylermenezes 14y ago
Facebook's is a little better - you can't disregard case entirely. Blizzard just cut the search space by a lot.
Then again, it would be pretty difficult to brute force a password in Battle.net, to be honest. I'm assuming they'd lock out the account after just a handful of tries.
- elithrar 14y ago> Then again, it would be pretty difficult to brute force a password in Battle.net, to be honest. I'm assuming they'd lock out the account after just a handful of tries. Correct. ~5 failed attempts forces you to use your authenticator code, and if you don't have one, you need to use their reset form and a captcha.
- chaud 14y agoThe game clients will lock an account out after ~20 or 30 attempts and I assume the website will do the same. No one is going to brute force an account.
- duaneb 14y agoYea, until someone steals their hashes.
- TWAndrews 14y agoAll your hashes are belong to us
- willvarfar 14y agoBut there are plenty of password stretching algorithms like bcrypt. A very reduced keyspace, but we all knew people's password choices are poor anyway right?
- rmc 14y agoWhich is easier said than done. Honestly if someone can do that, you have bigger problems to worry about.