This question already has an answer here:
I've been reading up on brute-forcing techniques and possible methods of prevention, but there is one issue that I haven't been able to find a clear answer to.
The way I understand it, a 'simple' brute-forcing attack for a password with 4 numbers would start with 0000, then 0001, 0002, etc. etc.
In theory, then, can you assume that if 0000 takes 1 second (just to keep things simple), and 0001 takes 2 seconds; then 9999 would take 9999 seconds?
Based on this, it would seem that --for example-- if you set your PIN code to 9999, it would take 9 times longer to crack than 1111?
Of course, this is an over-simplified example, but if we were talking alphanumeric passwords with symbols, wouldn't the safest password theoretically be a combination of the highest numbers, highest letters, and highest ASCII values for symbols?
I hope the question is comprehensible and someone can shed some light on this issue for me.