quantum/correcthorsebatterystaple
1
0
Fork 0
mirror of https://github.com/quantum5/correcthorsebatterystaple.git synced 2025-04-25 02:31:57 -04:00
Code Issues Packages Projects Releases Wiki Activity

Based on feedback, start with more traditional 4 word passwords

Browse source
This commit is contained in:
Quantum 2018-11-27 00:21:48 -05:00
parent c83ef1ea93
commit 1e2b63bd87
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/index.html
View file

@ -66,7 +66,7 @@
<div class="form-group row"> <div class="form-group row">
<label for="word-count" class="col-sm-2 col-form-label">Word Count</label> <label for="word-count" class="col-sm-2 col-form-label">Word Count</label>
<div class="col-sm-10"> <div class="col-sm-10">
<input id="word-count" class="form-control" type="number" name="count" value="5" min="1"> <input id="word-count" class="form-control" type="number" name="count" value="4" min="1">
</div> </div>
</div> </div>
@ -131,7 +131,7 @@
<p>Let us consider the absolute worst case, assuming the attacker knows your password is generated by this site, <p>Let us consider the absolute worst case, assuming the attacker knows your password is generated by this site,
knowing that it has 65 bits of entropy, your password was insecurely hashed, and your enemy has GPUs to run knowing that it has 65 bits of entropy, your password was insecurely hashed, and your enemy has GPUs to run
<span class="mark">500 billion attempts every second</span>. Even then, this scheme will resist the <span class="mark">500 billion attempts every second</span>. Even then, this scheme will resist the
cracking attempt for over a year.</p> cracking attempt for <code>over a year</code>.</p>
<p>Now, most attackers can't attack you that fast, and those who could have better things to do than spending a year <p>Now, most attackers can't attack you that fast, and those who could have better things to do than spending a year
doing nothing but attacking you (unless you possess state secrets or something), so this is more than sufficient for doing nothing but attacking you (unless you possess state secrets or something), so this is more than sufficient for