Re:LastPass: Notice of Recent Security Incident
by FatActor on Friday December 23, 2022 @01:08AM
(#34102767)
How is it nitpicking? The distribution tail effectively goes to a frequency of zero. Increasing to 10M doesn't solve the problem because the space is so vast, by the time you get to a fraction that has the similar area under the curve as 1M for 6/7/8 chars, you've lost any compute advantage. We're not talking an order of magnitude, we're talking multiple. As much as I know y'all want to hate on any password manager that isn't your favorite, math doesn't care about what strikes you as nitpicking.
[ Parent
| on HN ]
Re:LastPass: Notice of Recent Security Incident
by Eisenstein on Friday December 23, 2022 @01:24AM
(#34102841)
I don't use a password manager and am not familiar with the math involved; I was going off your 10million number and the post above you's 300,000 iterations/sec.
Re:LastPass: Notice of Recent Security Incident
by FatActor on Friday December 23, 2022 @11:15AM
(#34107392)
I'm trying to understand how Top-N frequency distribution flattens and becomes less useful as search space increases. It is a both a statistical and a psychological issue. If you can't help don't comment.
Re:LastPass: Notice of Recent Security Incident
by Eisenstein on Friday December 23, 2022 @04:09PM
(#34110645)
I think you might find that your life goes a little more smoothly if you weren't so abrasive, confrontational and dismissive. As a side affect, people you talk to won't end up feeling like shit because you possibly will treat them less terribly.
Re:LastPass: Notice of Recent Security Incident
by bawolff on Friday December 23, 2022 @10:33PM
(#34113662)
> by the time you get to a fraction that has the similar area under the curve as 1M for 6/7/8 chars,
You are (incorrectly) conflating entropy of a password with its length.
> math doesn't care about what strikes you as nitpicking.
Math actually cares a lot about the nitpicky details. Both in the sense that small things can have big effects, but also in the sense that things which sound big can also be irrelavent.