Quote from: lordoliver on June 29, 2016, 06:19:44 PM

Quote from: mattimann on June 29, 2016, 05:43:15 PM

Quote from: MrRen on June 29, 2016, 05:30:21 PM

Quote from: Bitdonator on June 29, 2016, 05:25:05 PM

Quote from: MrRen on June 29, 2016, 05:19:45 PM

Quote from: GinnaGinna on June 29, 2016, 05:17:02 PM

Quote from: lordoliver on June 29, 2016, 05:02:25 PM

Quote from: MrRen on June 29, 2016, 04:58:32 PM

Quote from: GinnaGinna on June 29, 2016, 04:37:54 PM

Quote from: Soul_eater_123 on June 29, 2016, 04:29:01 PM

Quote from: p75formula on June 29, 2016, 04:27:27 PM

I find this very suspicious since if I'd found a flaw in a coin I was invested in I'd take it directly to the devs rather than blab it all over the internet.

Yes. It is most likely an attempt at scaring people but it hasn't worked.

As I say, Im not fudding here and not try to scare people.

Just want to warn you all.

1,025,109.8 words in the English language x 12 words x 75,000,000 checks per second

you get an impossible amount of time try harder please

that's like having 1,025,109.8 possible characters , and a password with a length of 12, even at trillions of checks per second you wont be able to crack anything

only 2048 words in the pass-dictionary, but still 5.444517870735016e+39 combinations

Main problem is that passphrasses use only lowcase letter
without numbers included.

So its easier to bruteforce than Bitcoin key.

2048 words, if it was case sensitive it would be more than that , stop putin us on

yes, and if Max change code and make passphrasses case sensitive, that can
give extra security to Lisk.

That is an excellent point, but the initial "bug" is bogus
A 12 character passcode with only lower case letters has 95,428,956,661,682,176 combinations.

There are 26 letters , however there are 2048 words in the passphrase data base

Not to mention, one would have to have a perfect list of all those words specifically!

There are 1,025,109.8 words in the English language

Adding a variable of upper and lowercase alternating letters would definitely be great, but this Fud is just that, fud

Basically dont worry guys its all good

Max,... any comments...?

what comment do you need? it's enough said already...
everyone feel free to look in the javascript file (https://login.lisk.io/static/js/vendor_app.js line 56162, in english, chinese, spanish and japanese).
2048 words to the power of 12. Everyone can put that into calculator... its not possible to brute force.

Make sure to activate the 2nd passphrase for extra security. If someone were to find your Lisk address passphrase by brute force, they would need to brute force the 2nd passphrase which, in this case, would take millions and millions of years to break (even with the wordlist and a super computer).