Comment

Comment on [deleted]

nimpnin@sopuli.xyz ⁨1⁩ ⁨year⁩ ago

but iirc the bottom half has been sort-of half debunked

Any source for this? It’s literally just random words. Just pick from a large enough list and you’re good.

Sort:hotnew top

A_norny_mousse@feddit.org ⁨1⁩ ⁨year⁩ ago
Things a password cracker does before brute force guessing:

Dictionary attacks

Leaked passwords

Password guessing attacks

…
source
- nimpnin@sopuli.xyz ⁨1⁩ ⁨year⁩ ago
  If you pick 4 random words, the attacker would still need to brute force through (hundreds of?) billions of word combinations. That’s the point.
  
  source
  - hangonasecond@lemmy.world ⁨1⁩ ⁨year⁩ ago
    Yeah you’re correct. The person you’re replying to is treating dictionary attacks as separate from brute forcing. Dictionary attacks are great on short passwords using likely words, but as soon as you use 2 or 3 or 4 words it becomes computationally unfeasible. I would say a completely random string of the same or much less length is more secure because a dictionary attack won’t work at all, but 3-4 word passphrases are excellent for passwords that you have to manually enter ever.
    
    source