[miniTAX]

“I was able to do 10, manually. I bet a script could try thousands a minute, or more”

---

You can bet it but you can’t know it.
And even if true, it would still require years, just to find one account’s pwd. The numbers are simply not there to support such hacking scheme.

[Lazamataz]

If the numbers make brute-force cracks less likely (and shorter passwords could be cracked, I bet), I still hold that email-sending of passwords in clear text is a major violation of security. I, personally, was stung with someone who sniffed my email when I sent credit-card information to myself.

[bankwalker]

every combination doesn’t need to be tried ... only until you get a hit ...