15 chars limitation

[epixoip]

The full rockyou analysis:

but keep in mind rockyou's demographics: primarily kids, teenagers, and hopeless housewives who pass their time playing myspace and facebook games. not the most intelligent or well-trained bunch.

the rockyou leak was brilliant because it opened the first real window to the psychology behind password selection on a massive scale. the problem is, as large as that window was, it was still rather rather narrow and we cannot see the entire picture through it alone.

also remember that things are changing, especially with all the recent publicity around large leaks. the number of people using long passwords is increasing.