mardi 23 décembre 2014

How much do unusual characters in passwords help?



If I use a system that allows all Unicode characters or a similarly large space for passwords, how much would using an unusual character help in practice (for example, ࡀ ,which I found under Mandaic and doesn't render properly in Firefox for me)? I understand that in theory, an attacker making a brute force attempt would probably determine the character space and use the entirety of the possible characters. But, is this common in password cracking software? Is it likely that someone would try bruteforcing a large character space, or more likely they go for the low hanging fruit of alphanumeric and maybe include special characters easily entered on a keyboard?


I understand that Security Through Obscurity Is Bad and relying on this as the sole method of choosing a password is a bad idea and I shouldn't choose a 1 character password with the assumption that no one would try my character. But I'm curious if anyone has information about how strong of a password something like "ᏯᏯᏯᏯᏯᏯᏯᏯ" would be based on how hackers actually work.





Aucun commentaire:

Enregistrer un commentaire