A is a *realistic* case of security by obscurity - there's a sizable amount of p...

		CapacitorSet on Dec 2, 2017 \| parent \| context \| favorite \| on: Bucket Stream: Finding S3 Buckets by watching cert... A is a realistic case of security by obscurity - there's a sizable amount of people who believe that to be secure. B is in my opinion much less realistic: very few people believe a password two bytes long (or better, with two bytes of entropy) to be secure. Even a trivial password like "TelnetSucks" scores 31 bits of entropy with https://apps.cygnius.net/passtest/.

That app doesn't seem to be great. It complains when a password contains spaces or is longer than 16 words.