This site suggests using 4 common English words as a password is no longer safe.
Apparently the top 5000 English words in any combination of 4 words can be hashed in 1.5 minutes at 7Thash/sec.
The article didn't mention the hashing algorithm - but this is worrying.
Can anyone validate what this article is saying? I have a feeling they were talking about straight MD5 hashes. Also, how long for all the English word combinations - not just the top 5000? I couldn't quite do the math but came up with 8.6×1020 combinations.. I don't know how long that'd work out at.. a long time at a guess?