Comments by "Titanium Rain" (@ChucksSEADnDEAD) on "How to Choose a Password - Computerphile" video.

  1. Peter Koperdan from what I got incompetent services have stored passwords as text files which means that if the service is hacked, the file is found so game over. What others do is only store the hashes, they run your inputs and check if the resulting hash is equal. So if you hack the service you only get hashes not passwords and you can't work backwards. But if you have the dictionaries+rules or lists of passwords stolen from other places you can run those attempts, and when hashes are equal you know you have found a password. So the problem isn't hackers caring about you, it just could happen that by sheer bad luck you become a point of entry due to your password being found in the service's hashes.
    2