note 58737 deleted from function.microtime by tularis

Note Submitter: logix dot Spam-me-not at hacker dot dk ---- Regarding discussion about generation of passwords using microtime. Its proberbly "ok" for a first-time password, but it is NOT better than random. Cryptographicly there will very limited keyspace to test of you use this method. If the stored password hash was to fall into wrong hands it would quite easily be cracked, as there are several factors that limits the combinations. Especially if you know ca. what time the password was issued. The string output from microtime looks like this: - 0.93839800 1131978543 The first number is always 0. On my computer, it seems that the 7th and 8th number are always "00", so lets assume that as well. In the last number (the epoch timestamp), there are only 3.600 combinations (=seconds) in an hour. That leaves 6 unpredictable digits (the 938398 above). thats 10^6 = 1.000.000 (combinations). 1.000.000 combinations can be checked in 55 seconds on my 3.2ghz So the time it takes to crack is 55 seconds, times the number of seconds youre guessing (in the timestamp).. If, say, you know ca. when the password was created, +-5minutes. That a 10 minute total, a span of 600 combinations, that would be: 600(seconds) * 55 (seconds crack time) = 9 hours. And that using just 1 computer..