It’s an on keyboard character, and emprically people are waaaay more likely to use those. It’s also just one character, repeated. It has really, really low complexity. Given that there are dictionary attacks and rainbow tables covering any three word combination, with initial capitalisation and common letter number substitutions this is an incredibly weak password. Actually, either of any 7-character password or any password that is just one character, repeated are very weak, their intersection suffers from both problems.
I don’t get it—why is ******* an obvious password?
It’s an on keyboard character, and emprically people are waaaay more likely to use those. It’s also just one character, repeated. It has really, really low complexity. Given that there are dictionary attacks and rainbow tables covering any three word combination, with initial capitalisation and common letter number substitutions this is an incredibly weak password. Actually, either of any 7-character password or any password that is just one character, repeated are very weak, their intersection suffers from both problems.
http://www.bash.org/?244321