4 ms·
I'm not. If you use a unique password for every service, entropy doesn't matter beyond a low threshold, because guessing passwords against a live service is not
by coldpie 2y ago
I'm not. If you use a unique password for every service, entropy doesn't matter beyond a low threshold, because guessing passwords against a live service is not an attack people are actually doing. The "1235" is an extreme example, I wouldn't bet my bank account on it, but I still think the point stands.
- ziddoap 2y ago>guessing passwords against a live service is not an attack people are actually doing Credential stuffing is an attack people are actually doing.
- Terretta 2y ago> * guessing passwords against a live service is not an attack people are actually doing* flat wrong ... if one thinks this, one likely isn't operating a high value target