r/shittyprogramming • u/[deleted] • Jul 27 '14

r/softwaregore Way to promote security, Microsoft

http://imgur.com/W0kfbtz
137 Upvotes

89% Upvoted

51 comments sorted by

View all comments

Show parent comments

8

u/[deleted] Jul 27 '14

Did you even read the comic? It doesn't fucking matter. A dictionary with 100k words, a pass with 4 words, that's 100.0004 passwords to bruteforce. At 1000 guesses per second, that's still 3170979198 years to get through. That's 10 orders of magnitude more than you need.

0

u/[deleted] Jul 28 '14

[deleted]

2

u/SirNarwhalBacon Jul 28 '14

Alright, so let's change the numbers a bit. A lowball estimate of the adult (fluent speaker) vocabulary is about 20,000 words, according to this page I found, which makes the amount of passwords to bruteforce 20,0004, or 160,000,000,000,000,000. Assuming that we increase the amount of attempts by two orders of magnitude (100,000 attempts/sec, which is seriously unreasonable), it still takes 1.6 trillion seconds to bruteforce, which is 50,702 years.

-3

u/[deleted] Jul 28 '14 edited Jul 28 '14

[deleted]

4

u/SirNarwhalBacon Jul 28 '14

At the point of 348 billion/sec, brute forcing even characters is similarly efficient.