True, maybe someone could turn their farm into a password cracking service, but very few have this capacity as you said. I have a very modest dedicated operation myself and was basing my experience from using a lone GTX 460 with http://www.golubev.com/hashgpu.htm's rar cracker. If I remember correctly, it would have taken a month to get a 8-character password cracked and I most likely used a 12+ character long password. I was also using it on my main computer which made it unusable and therefore I stopped. Now because of mining, I have that card plus 4 5830's. I don't want to stop mining though just to crack that password; I want to get the last bit of profitability out of them with the current difficulty and exchange conditions. I sent the file off to http://www.thegrideon.com about a two weeks ago and haven't heard back lol.