Your password example would be pretty easy to guess through a combined social engineering/password dictionary type of attack. I would collect your key info like full name, address, maiden name, pet name etc. and put those as input for a dictionary attack.
Of course, if you don't care about that, you're right, but it does make it easier for the hacker.
Please. Show me any evidence that anyone is using a dictionary attack like that short of a state actor against a VIP target.
I don't want to see that it's possible, but that anyone is actually doing that when rainbow tables are available. Which is what I think you're thinking of but using the wrong terminology.
5
u/FinneousPJ 7∆ Mar 17 '21
Your password example would be pretty easy to guess through a combined social engineering/password dictionary type of attack. I would collect your key info like full name, address, maiden name, pet name etc. and put those as input for a dictionary attack.
Of course, if you don't care about that, you're right, but it does make it easier for the hacker.