Eturnalshift wrote:
Yes, any password is crackable, but the point is to ensure that your password is so damn difficult for a computer to guess, that it takes years for someone to actually crack it. Do any of us believe that a hacker is going to devote years of resources to cracking a single GW2 account password? Even if someone did pull the information of every account in the accounts table, don't you think the developers had the sense to store the passwords as a salted hash with an uncracked (SHA2?) algorithm? That's Security 101 in creating authentication systems...
That's why I think most of the people who are getting hacked are the derps who are using the same e-mail and passwords that they've used on other compromised games or gaming websites. In that scenario the hacker wouldn't need to worry about trying the impossible of reversing a salted hash or checking it against a rainbow table... they simply try the acquired credentials. If they log in, they have a successful match. This is also possible for those who use the same e-mail address, but a different password. If the different password is weak, lacking complexity or length, and is especially a common password, then a hacker could hacked the account that way.
Since the passwords are not being obtained via guess-and-check, the complexity of the password is irrelevant and serves only to convey blame to the end user.
Uniqueness, yes, complexity, no.
and like I said the problem is on their end. Which means it doesn't matter how "unbreakable" your PW is. All that .jpg shows is that any PW is breakable. Just a matter of how long it takes. All my PW's are unique and have 3 words and a string of numbers with random caps, really doesn't help much when the website you are logging into gets hacked.
