pull down to refresh

The way I understand it, strong passphrase and/or human made mmnemonic are still safe, right? 🤠

strong passphrase needs to be pretty freaking strong if you didn't use at least 38 dice rolls.

maybe the mnemonics are safe, but you really don't have a good way of ensuring that you have sufficient entropy if you're not using measurable entropy (multiple random dice rolls, or plucking actually random words from a bucket of the valid seed words).

fortunately, it looks like the dice roll code is not totally compromized.

reply

I don't think that's true. Bruteforcing preimages of passphrases should be per char which grows fast

reply

https://xkcd.com/936/

we should be more specific when we say "strong".

what I'm getting at is: aardvarkaardvarkaardvarkaardvarkaardvark is a lot of characters, but if the mechanism for guessing words is plucking them alphabetically, you're not gonna be in a good situation

reply

Rainbowtable attacks are mooooving the goaaalpost

reply

I don't want to misrepresent my level of understanding here, so I'll ask outright:

I thought rainbow tables were pre-constructed. Are you informing me that iterating words from the dictionary to create combinations of common words is a 'rainbow table' ?

reply