> Just wondering if I am missing something here. It may take a long time > to go through _all_ combinations, but all the cracker wants is the > _correct_ password. This might be on the first try, but not likely the > last. Assuming the password is random enough, it'll take on average testing half the set to get the correct password. But, yes the cracker could just be lucky, but given a random password it's just as likely to be the last one guessed as the first.