News for hackers. Stuff that matters.
Re:NULL license plate not such a bright idea by FabHK on Monday August 12, 2019 @06:26PM (#20680746)
It does make sense, because the keepass entropy estimate presumably (like the excellent zxcvbn) tries to approximate the empirical distribution, not the theoretical uniform one.

In theory, "68703649" and "12345678" are equally likely to be pulled from the hat, but in practice one is a much better password than the other. You can reduce the search space by trying the passwords with higher (empirical) probability first.

Re:NULL license plate not such a bright idea by DCoder on Tuesday August 13, 2019 @12:37AM (#20682871)
> the keepass entropy estimate presumably […] tries

KeePass sources are available [0], you can see the specific algorithms it uses in [1].

[0]: https://sourceforge.net/projects/keepass/files/KeePass%202.x...

[1]: https://fossies.org/windows/misc/KeePass-2.42.1-Source.zip/K...

Re:NULL license plate not such a bright idea by FabHK on Wednesday August 14, 2019 @08:46AM (#20694931)
Thanks. I've looked at the code, and it does not seem to try to estimate the empirical distribution (doesn't appear to be using dictionaries, for examples).

Then the discrepancy maybe comes from the number of glyphs within certain categories, or their repetition?