Link to "xkcd sucks"
Many articles on this website are critical of and even insulting towards their subjects. I included a link to "xkcd sucks" because it's relevant to xkcd. TheLateGatsby (talk) 04:17, 6 August 2012 (UTC)
- xkcd expkained was better. I sometimes needed it to even understand the joke as "nerd references" are lost on this nerd. But +1 for keep the link. Pi 3:14 (talk) 06:37, 6 August 2012 (UTC)
- A gallery is a horrible way to present them when there are only three images & they are unreadable at that scale. WěǎšěǐǒǐďMethinks it is a Weasel 09:20, 29 June 2013 (UTC)
We should also include the fact that Randall is critical of climate-change denialism, and that is referenced in comics 164, 887, 1225, and, most recently, 1321. — Unsigned, by: 18.104.22.168 / talk / contribs
Additionally, as evidenced by Randall's January 2008 blag (not a typo) entry, Randall supports Obama for president, and, based on all the evidence, is most likely a liberal. I included it in this section because I think it should be added to the Topics Covered section.
Not a major issue, but I stumbled slightly over "...from the perspective of an introverted geek — the same perspective shared by most of the target audience." Isn't that a bit of an assumption? If we mean 'target audience' as the audience that Randall has in mind, then there should probably be a reference, if it's more 'target audience' is the sense of who actually reads them, it's probably wider than you imagine. No biggie though. Worm (talk) 09:47, 9 March 2015 (UTC)
Argumentum ad xkcd
I've removed the criticism of "correct horse battery staple", as it seems to be a misunderstanding... The comic does pick four words at random, which in the example gives ~44 bits of entropy, which means an attacker cannot do better than 2^44 guesses - this assumes that the attacker is using a "combinator attack". The contrary examples in  of "howdoyouthink!", "momof3g8kids", and "ilovemySister31" are clearly not four dictionary words picked at random; they can be cracked in less than 2^44 attempts because they are each little better than one dictionary word. Toad Chavez (talk) 15:22, 2 November 2015 (UTC)
- It's not "wrong", it's simplistic and misses the reality of passwords and how people work with them. People are really piss-poor random generators for this sort of thing. There is a difference in what people "should" do, and what people "actually" do.
- Given that the average vocabulary size is about 20k to 35k, the cracking would be about 231 to 2170 days (using the 8 billion/second from the Ars article, which is a few years old, so it's probably more now). The 231 days is probably okay for most things, but probably not for everything (especially long-term stuff). If we reduce the word list to just 10k, we end up with a cracking time of just 14 days.
- The obvious solution to this is to add more words, 5 words already gives us ~400 years, and 6 gives 4 million years.
- But at this point we must wonder whether the passwords are still mnemonic... Not all 5 random words from a dictionary are (even "correct horse battery staple isn't, as such, IMHO).
- This is for Schneier's scheme is better, it dramatically lengthens the passphrase
- Of course, the best way is probably still using a good password manager... Carpetsmoker (talk) 22:57, 16 December 2015 (UTC)
- See also https://www.explainxkcd.com/wiki/index.php/936:_Password_Strength with rebuttals to Schneier's straw man — Unsigned, by: 22.214.171.124 / talk