"We tend to think of password guessing as a very time-consuming attack in which I take each account and try a large number of name-and-password combinations," Mr. Shulman said.

Shulman先生说：“我们往往认为破译密码非常耗时，需要逐个尝试密码和用户名的组合。”

youdao

But it still has some security hidden troubles, for instance: replay attack, password guessing, inter-session chosen plaintext attacks.

但仍存在一些隐患，例如：重放攻击、密码猜测、会话中选择明文攻击等等。

youdao

This way improved its security against password guessing attacks and password leaking without any change of the original protocol framework.

该方法在保持原有协议的基本体系不变的前提下，较大地提高了安全性，有效地防范了口令猜测攻击和口令泄漏等。

youdao

Along with boosts in speed and thoroughness of its password guessing, Marlinspike says CloudCracker will now also offer APIs that mean developers could build applications that use its password cracking resources within other programs, or even on mobile devices with an Android or iPhone app.

FORBES: Moxie Marlinspike's CloudCracker Aims For Speedier, Cheaper Password Cracking

Those include vulnerability to denial of service attacks, which overload servers with thousands of simultaneous requests for data, as well as basic hacking tactics like guessing the password of users who fail to change default settings.

FORBES: VoIP Vandals

But Passport, which stores personal information on Microsoft's servers, still lets customers use wildly insecure passwords like "password, " and lets anyone who knows your zip code take several cracks at guessing the personal "secret question" that resets the password.

FORBES: Can You Trust Your Computer?