LinkedIn password leak
<i>1: Change your password. RIGHT NOW. If you’re not sure how strong your password is, test sample passwords with our password checker here.</i> Seriously?<p>Keep in mind that these estimates are based on some bogus entropy estimation. If a password hacking guy runs the correct dictionary past the hashes you password generates, it might be as small, well, as the first one tried. For example, run the passphrase <i>Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn1</i> past the kaspersky bruteforce estimator, you get 10,000 centuries. But this is clearly false, as inicated in <a href="http://arstechnica.com/security/2013/08/thereisnofatebutwhatwemake-turbo-charged-cracking-comes-to-long-passwords/" rel="nofollow">http://arstechnica.com/security/2013/08/thereisnofatebutwhat...</a>. They clearly "cracked" this in far less time: "in a matter of minutes".