CDR: Re: Is kerberos broken?

On Sat, 2 Sep 2000, BENHAM TIMOTHY JAMES wrote:

A human can easily remember 26 random letters from a 32 character alphabet with a little mnemonic method (eg map each character to a word so that it makes up some sort of dumb story). 5*26==130 which is more bits than computers can currently exhaust over.

True, especially if you salt with a suitably long random number and combine the two with a sufficiently nasty serial computation. Most of this thread does not, despite the strong wordings, actually concentrate on what average people *can* do but what they are likely to do when they do not have any real reason/incentive to guard their privacy. Sampo Syreeni <decoy@iki.fi>, aka decoy, student/math/Helsinki university