<div dir="ltr">So if you are going to take advantage of the larger dictionary, <div>how does this help you, unless you can be sure that the word you found in the larger dictionary is not in the smaller dictionary?</div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Apr 15, 2020 at 2:16 PM <a href="mailto:paulz@ieee.org">paulz@ieee.org</a> <<a href="mailto:paulz@ieee.org">paulz@ieee.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div style="font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:13px"><div>I decided to go ahead and work out some examples.<br></div><div><div dir="ltr"><br></div><div dir="ltr">First table shows password character sets of 26, 52, 62 and 70 characters. Then the possible probabilities for different lengths.<br></div><div dir="ltr"><br></div><div dir="ltr">For example, a length of 8 characters with the largest character set has 6 E 14 possibilities.A length of 9 chars and only mixed case letters has 3E15 possibilities. 10 characters, with no case is almost as good. <br></div><div dir="ltr"><br></div><div dir="ltr">So, forget the special characters and use looong passwords.<br></div><div dir="ltr"><div><pre> letters letters Letters & letters
no case mixed case numbers numbers
punctuation
chars: 26 52 62 70
length
4 5E+05 7E+06 1E+07 2E+07
8 2E+11 5E+13 2E+14 6E+14 *
9 5E+12 3E+15 * 1E+16 4E+16
10 1E+14 * 1E+17 8E+17 3E+18
12 1E+17 4E+20 3E+21 1E+22
16 4E+22 3E+27 5E+28 3E+29
24 9E+33 2E+41 1E+43 2E+44
32 2E+45 8E+54 2E+57 1E+59</pre>
</div><div dir="ltr"><br></div><div dir="ltr">This
thread started with a reference to kxcd and using several random dictionary
words. <br></div><div dir="ltr"><br></div><div dir="ltr">The following table has some examples for different size
dictionaries. Someone mentioned a dictionary of only 500 words. I
think the well educated English speaker knows thousands of words. Or
one might use a language from Scandinavia, or just one or two good German words. <br></div><div dir="ltr"><br></div><div dir="ltr">So 4 words from a rather large dictionary is
also 6E14, the same as 8 characters including punctuation. 6 words from
the small dictionary would be even better.</div><div dir="ltr"><br></div><div dir="ltr">Now,
naturally passwords made of even 4 words is many letters; the xkcd
example is 25 letters. So we are back to the same conclusion: use
really long passwords. <br></div><div dir="ltr"><br></div><div dir="ltr"> kxcd style
</div></div><div><pre>dict: 500 words 1000 words 5000 words 10000 words
length
4 6E+10 1E+12 6E+14 * 1E+16
6 2E+16 1E+18 2E+22 1E+24
8 4E+21 1E+24 4E+29 1E+32
10 1E+27 1E+30 1E+37 1E+40</pre>
</div>Now a different question. Who
can actually try a large number of logins? In my experience just
trying to get into my own account, it takes a second to get a response
that I messed up. That limits my attempts to not very many in an hour.
Also, If I mess up more than 4 or 6 times in a row, I get locked out
and have to phone the bank for assistance.</div><div dir="ltr"><br></div><br> <br> <br> On Wednesday, April 15, 2020, 12:45:54 PM PDT, Rick Moen <<a href="mailto:rick@linuxmafia.com" target="_blank">rick@linuxmafia.com</a>> wrote: <br><br><br><br><br><br>Quoting Texx (<a href="mailto:texxgadget@gmail.com" target="_blank">texxgadget@gmail.com</a>):<br><br>> That was one place you SHOULD correct people because password<br>> misunderstanding is a danger to the ENTIRE community.<br><br>It's not difficult to do the math and spot that Paul simply had terms<br>reversed. <br><br><div><br></div></div></div>_______________________________________________<br>
conspire mailing list<br>
<a href="mailto:conspire@linuxmafia.com" target="_blank">conspire@linuxmafia.com</a><br>
<a href="http://linuxmafia.com/mailman/listinfo/conspire" rel="noreferrer" target="_blank">http://linuxmafia.com/mailman/listinfo/conspire</a><br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature"><br>R "Texx" Woodworth<br>Sysadmin, E-Postmaster, IT Molewhacker<br>"Face down, 9 edge 1st, roadkill on the information superdata highway..."<br></div>