03-27-2012, 04:52 PM
This challenge is a great idea, thank you james123 ! 
I do wonder though if it might be better if a different source password list was used, as in one without existing modifiers ?
As I am sure we are all already aware most passwords consist of a base word with either a pre /suffix number. Then upper / lower case is often applied. If your test uses passwords that have already had their base word modified then your winning rule list will be a good rule list for passwords that have been pre modified only.
I guess this would mean that the best 64 rule list that you end up with will only be the best 64 rules for that particular password list as it has already been manipulated and modified.
I would be very keen to learn if you would be interested in running your experiment again but using a clean password list, as in base words, lowercase only without existing pre / suffix modifiers ? The resulting best 64 rule winner from a clean password list test would be a better reflection of how most people modify their base words. I am sure the results of that test would probably provide us with a better understanding of the general public’s method of base password manipulation.
Anyway great idea and thanks for your work !
I do wonder though if it might be better if a different source password list was used, as in one without existing modifiers ?
As I am sure we are all already aware most passwords consist of a base word with either a pre /suffix number. Then upper / lower case is often applied. If your test uses passwords that have already had their base word modified then your winning rule list will be a good rule list for passwords that have been pre modified only.
I guess this would mean that the best 64 rule list that you end up with will only be the best 64 rules for that particular password list as it has already been manipulated and modified.
I would be very keen to learn if you would be interested in running your experiment again but using a clean password list, as in base words, lowercase only without existing pre / suffix modifiers ? The resulting best 64 rule winner from a clean password list test would be a better reflection of how most people modify their base words. I am sure the results of that test would probably provide us with a better understanding of the general public’s method of base password manipulation.
Anyway great idea and thanks for your work !