<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On 4 May 2013 19:23, Richard W.M. Jones <span dir="ltr"><<a href="mailto:rjones@redhat.com" target="_blank">rjones@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
Another opinion.<br>
<br>
It is possible to study such things, and even give caveats and error<br>
bounds to show uncertainty.<br>
<br></blockquote><div><br><br></div><div>Yes and no. It's possible it a tightly defined setting with specified outcomes. Since a crucial factors here include how likely someone is to either intentionally attempt to steal a password (and how much effort they will go to) or to opportunistically use a casually spotted password and what the consequences of that happening are versus the risk of a potentially wrongly set password it's likely any genuine research is going to be hard to transfer.<br>
</div></div><br>-- <br>imalone<br><a href="http://ibmalone.blogspot.co.uk" target="_blank">http://ibmalone.blogspot.co.uk</a>
</div></div>