Wouldn't you first have to know that the passphrase consists of four randomly ch... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		TetOn on Aug 11, 2011 \| parent \| context \| favorite \| on: Xkcd Password Generator Wouldn't you first have to know that the passphrase consists of four randomly chosen words (eg not three, five, or eight)? To me, that's the underlying strength of the approach that the comic (!) is trying to highlight.

burgerbrain on Aug 11, 2011 [–]

The entropy is actually calculated with the assumption that the attacker already knows those things. If they don't, then it is higher.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact