full-disclosure - Senior M$ member says stop using passwordscompletely!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: Will.Banta at broadwing.com (Banta, Will)
Subject: Senior M$ member says stop using passwordscompletely!

>> Wow! Three-year-olds are supposed to have a vocab of 500+ words.... 

>So, how long would it take a 3 year old to brute-force through that key
space? ;)

Around 10 minutes assuming:

1) Words are spoken at a rate of appx. 1 per second
2) A suitable speech-to-text converter is used (i.e. parental help)
3) The sets representing the child's lexicon ( A ) and that of the
average computer user ( B )
   completely overlap i.e. A = B. Now this is giving the average
computer user a LOT of credit ;)

-wrb

;) ;)

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004