you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 2 years ago (3 children)

More than to protect a real password, this is done (in my experience) to prevent a bunch of unoriginal drones make that THEIR password, because they think is funny, which only means the string gets added to a "passwords to attempt" text list on some hacking website ....

Decreasing security all together

Case in point: Hunter2, correcthorsebatterystaple, solarwinds123 and Pa$$w0rd1

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 2 years ago (2 children)

    I mean, the philosophy behind correcthorsebatterystaple is good. I used that method for master passwords to password managers and it really does work well to help you remember a long complex password that can't be guessed easily.

    But some people might have been missing the point of that xkcd using correcthorsebatterystaple itself.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 7 points 2 years ago (1 child)

    It's okay. The thing is when running an attack are you going to permutate through every combination of characters, or are you going to use words from a dictionary first? correcthorsebatterystaple (not a dictionary word) is better than antidisestablishmentarianism (a dictionary word) but in a realistic attack concatenating dictionary words is going to be the next step.

  • source
  • parent
  • hideshow 1 child comment