然而，我们发现，长度约为20个字符左右、相对较“弱”的密码也已经能够使得针对单一账户的暴力破解变得不现实：只要有“三振出局”的规范即可。 （译者注：原文的“three strikes” type rule 指的应该是连续三次输入错误密码就会暂时锁死账户，具体可参考此处。）

However, we find that relatively weak passwords, about 20 bits or so, are sufficient to make brute-force attacks on a single account unrealistic so long as a “three strikes” type rule is in place.

youdao

有，所有会员连续两年内未在酒店有任何消费，系统将自动取消会员账户。

It has the limited period. the member account will be expired if no activities for two years.

youdao