3 ms·
I would argue that a password containing emojis is unlikely to ever be cracked, because no attacker is going to test emojis unless they have some reason to beli
by arcfour 11mo ago
I would argue that a password containing emojis is unlikely to ever be cracked, because no attacker is going to test emojis unless they have some reason to believe you use them in your password.
- anonym29 11mo agoAttackers don't come up with every entry on the wordlist they throw into hashcat themselves. The attacker's imagination has essentially zero correlation with the contents of their wordlist.
- arcfour 11mo agoOkay. How many major wordlists include emojis? Maybe...like...a dozen entries at most across all of them?
- anonym29 11mo agoRest assured, the world's intelligence agencies and cybercrime rings aren't just taking vanilla open source wordlists off github and hoping they get lucky. You don't know what your adversary's wordlist contains, and assuming you do is a recipe for overconfidence.
- arcfour 11mo agoYes, "if your enemy is state sponsored attackers" you shouldn't do many things, like use bcrypt incorrectly, or really passwords almost at all. That's obviously not what I'm saying.