So is diceware useless for use as an actual password? It's just half a dozen regular words without spaces...

So is diceware useless for use as an actual password? It's just half a dozen regular words without spaces, how is this secure?

Entropy.

15 minutes with a dictionary bruteforce and you're compromised.

>dictionary attack
>bruteforce attack

mutually exclusive (usually)

t. password cracker

Spell one word wrong, dictionary btfo

l...lewd

Lol okay kid, confirmed for not knowing shit.

10 random alphanumeric chars is virtually uncrackable. Change it to 12 and it's impossible.

>inb4 xkcd meme xd

I wish tits like those were real.

the point of the comic is that it's much easier to remember

You can't be serious

moar?

Asanagi. Notable artist. Now back to

when do you kids go back to school?

Do you know what the search space for a dictionary is? It's fucking massive. English literally has hundreds of thousands of words. 4 words is going to be harder to crack than a 12 character password by bruteforce.
If you throw in a made up word, and maybe some random transformation, your password becomes even harder to crack.

Ask me how everyone knows summer's here

ez you farming

Yes it is. Any retard can make up random words without using some autistic way to do it

bloop hoy wawa plerp phelgm goobler

wow enjoy your hot new password i just come up with that is just as retarded to remember as the diceware shit

Couldnt you use dedikind cuts to break all passwords?

they are, you just wont find them on japanese 12 year olds like in the OP, youll find them on 30-something american whores

is this true? why do passwords require special characters and numbers?

Prevent alphabet attacks alone, adding symbols/numbers adds to the pool slowing down bruteforce attacks.
Combining uppercase/lowercase alone doubles the pool of checks to be done.

In addition using all of unicode can significantly slow down bruteforce attacks.
If the user was previously bruteforcing entirely in the cache vs having to pull from ram as well as in general increasing the pool.

If they did a straight brute force with everything in the pool then sure it would be a good password.
If the attack tried to use a dictionary attack using only lower case letters, that 4 word password would be discovered very fast.