> On one hand, yes, this technology would easily protect you from brute-force and dictionary-based attacks. I highly doubt that. There will be a finite number

> On one hand, yes, this technology would easily protect you from brute-force and dictionary-based attacks. I highly doubt that. There will be a finite number of possible patterns. So brute force will be possible. There will likely be some types of patterns or some pattern components that do not follow an even distribution, so dictionary attacks will still exist. (Really, a dictionary attack is simply a brute force attack that takes advantage of the non-uniform choices of passwords.) My guess is that such games would be chosen based on techniques that produce the best (aka, most uniform) distributions of responses from users, but I doubt that it will be perfect. A brute-force attacker would probably be able to do noticeably better than blind brute-force.