logoalt Hacker News

ApolloFortyNinetoday at 3:39 PM2 repliesview on HN

Explaining your life to an llm, then having it generate permutations of passwords to try does sound like it would work a decent percentage of the time.

A large percentage of passwords aren't a random string of characters but a memorable word + memorable number. There's existing projects that basically do the same, and 3.5 trillion doesn't really make it clear if one of those wouldn't have worked as well, but I can see it having an above random chance to guess a password.


Replies

nonethewisertoday at 6:35 PM

>Explaining your life to an llm, then having it generate permutations of passwords to try does sound like it would work a decent percentage of the time.

I cannot relate to this at all. This information doesn't really seem that helpful. What might the strategy look like? Including spouses names or other proper nouns associated with you. But it's going to be a massive brute force effort still, and the likelyhood of a targeted crack that performs significantly better than more naive brute force passwords seems so unlikely.

Are your passwords like "SPOUSE_NAME:HOMETOWN_NAME"? Even if so there are probably more people with dictionary words that can be brute forced faster. IT would have to be the case that more people use patterns like that compared to something a regular dictionary attack could crack.

show 1 reply
nilamotoday at 5:54 PM

The idea that someone (the NSA?) is training models on all of our collected info, and using that to predict all of our hidden information, is horrifying.

The best time to start using a password manager was 10 years ago. The second best time is now.

show 1 reply