This should probably be watched by anyone who wants to use a brainwallet:
DEF CON 23 - Ryan Castellucci - Cracking CryptoCurrency Brainwallets. He even posted an update (not entirely sure if the account is genuine):
Ryan Castellucci 6 days ago
The current release of brainflayer is much faster than what I released at DEFCON. Currently, it's only $40 to check 1 trillion passphrases on AWS, which works out to 25 billion per dollar.
Yes, that youtube comment is from me.
a trillion pass phrases. thats only:
9 alphabet characters deep
8 alphanumeric characters deep
7 alphanumericsymbol characters deep
When cracking passwords, exhaustive search with a character set is the
last thing one tries. Breaking weak passwords and passphrases dozens or characters long or more is common with the proper tools.