• SaltyIceteaMaker@lemmy.ml
    link
    fedilink
    arrow-up
    2
    arrow-down
    1
    ·
    4 days ago

    It’s still less combinations than just scramble tho. It may be enough idk, but an algorithm that just combines words would definitely at some point arrive at like “SaltyIceteaMakerBlueAcorn” it’s only once you add random letters/numbers/special characters that a dictionary attack stops working.

    Although this probably doesn’t matter as it would likely still take like a century or ten to complete

    • Viking_Hippie@lemmy.world
      link
      fedilink
      arrow-up
      1
      arrow-down
      1
      ·
      3 days ago

      It’s still less combinations than just scramble tho

      Not in any meaningful way, no. There’s what, hundreds of thousands of words in the English language? With no apparent pattern, that’s a near-infinite number of possible combinations of 5 or 6 word phrases.

      Add that most password crackers would use another kind of attack that presupposes that there’s numbers and special characters and you really have redundancy on redundancy.

      an algorithm that just combines words would definitely at some point arrive at like “SaltyIceteaMakerBlueAcorn”

      Not within your lifespan or even that of humanity.

      it’s only once you add random letters/numbers/special characters that a dictionary attack stops working.

      That’s just not true if you don’t consider “might theoretically get there in a million years” as “working”.

      Although this probably doesn’t matter as it would likely still take like a century or ten to complete

      Exactly. So your entire point is moot. A password or passphrase doesn’t need to hold for longer than the existence of the account (or whatever’s being protected by it), the user, or the species of the user.