<i>&gt;This comment doesn&#x27;t make sense. All attacks are not equal. Some require physical access; some do not. Some require seed data; some do not. What exactly are you talking about here?</i><p>I&#x27;m not a security expert, more of a hobbyist. So I&#x27;ll let someone else quantify potential specifics. To my understanding, they would not require physical access and would be able to guess any passwords generated (once an attack has been found&#x2F;created).<p><i>&gt;That&#x27;s not what I&#x27;m worried about. I&#x27;m worried about given that they do exist what is the risk to me? What is the likelihood that my account has been broken into?</i><p>The chances of 0 becoming 1 are not quantifiable because it requires knowing unknowns. It is, however, non-zero. For a small list of unknowns:<p>1) Who knows about the attack<p>2) How practical is the attack?<p>3) What software&#x2F;websites&#x2F;people are they choosing to attack<p>4) Are you even using any of the software&#x2F;websites that are being attacked?<p>5) Are they going to accept cracking &lt;10%~ accounts if they can do so in &lt;24 hours or is their goal to crack &gt;50%~ accounts? Many crackers only care to scrape the bottom of a barrel. What are the chances you were in the part of the barrel they scraped?<p>I assume the worst because being compromised is a zero-sum game. I&#x27;ve been compromised or I haven&#x27;t. Therefore my variables are:<p>Everyone. Extremely. Only things I use. Of course. Doesn&#x27;t matter, I&#x27;m in the targeted group.<p>I wouldn&#x27;t make any bets on security through obscurity.