3 ms·
It depends on the attacker. It is possible (though far less likely in the grand scheme) to be targeted as an individual. In that case, an attacker could use com
by akerl_ 12y ago
It depends on the attacker. It is possible (though far less likely in the grand scheme) to be targeted as an individual. In that case, an attacker could use compromised data from weaker services to derive information about your other passwords.
This is one of the reasons I don't recommend patterns as with the one mentioned elsewhere in this thread. While something like "[category] [words] [name of service]" might aid memorization, the pattern will leak if a weakly-protected secret is compromised, allowing an attacker to approach more important secrets.
- TBastiani 12y agoIt's also much more costly because the attacker cannot rely on the birthday paradox anymore to reduce the cost per bit of entropy. Also, it depends on how popular the scheme becomes, you never know! :-D
- deleted 12y ago[deleted]