I really doubt that they brute-forced alapdanceissomuchbetterwhenthestripperiscrying. I have no exact idea, but I guess i would take 1000s or millions of years to bruteforce 1,22680068e65 combinations (taking only lowercase letters into account), if you don't have a working quantum computer available.

UPDATE: I did some rudimentary math and think that top notch server farms would take something like 1e35 to 1e42 years to bruteforce 26^47 combinations.

It's not a random sequence of characters, there are only 12 words in there. The cracker is trying words, not just random bytes and so the search space is much smaller

It's not trying random words, it's not even trying random syntactically valid English sentences, it's trying out song titles.

Which is a laughably tiny password space.

Yes, it's not brute-forcing then. That's what I was getting at.

'97 quattuordecillion years' according to howsecureismypassword.net/, if the password wasn't thebloodhoundgang song title

It's probably a phrase from a book or movie. There are much fewer published 12-grams than 26^47.

It's actually a song title.

Which is really easy information to track down.

https://www.google.com/search?q=alapdanceissomuchbetterwhent...