A better way to think about passwords

Daniel Kahn Gillmor dkg at fifthhorseman.net
Sat May 28 01:16:03 CEST 2011


On Sun, 17 Apr 2011 15:49:58 -0700, Doug Barton <dougb at dougbarton.us> wrote:
> Summary: A 3-word password (e.g., "quick brown fox") is secure against
> cracking attempts for 2,537 years.
> 
> http://www.baekdal.com/tips/password-security-usability

A computational linguist's rebuttal to Baekdal's post:

 http://trochee.net/2011/05/fragments-will-not-save-us/

The takeaway: Baekdal's analysis only holds for extremely naïve brute
force attempts.  Please don't assume that all attackers will be so
naïve.

        --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 965 bytes
Desc: not available
URL: </pipermail/attachments/20110527/83c0f85c/attachment.pgp>


More information about the Gnupg-users mailing list