The researchers also suspected that even those who do not use famous phrases would still prefer patterns found in natural language over true randomness. So they compared their collection of passphrases with two-word phrases extracted at random from the British National Corpus (a 100m-word sample of English maintained by Oxford University Press), and from the Google NGram Corpus (harvested from the internet by that firm’s web-crawlers). Sure enough, they found considerable overlap between structures common in ordinary English and the phrases chosen by Amazon’s users. Some 13% of the adjective-noun constructions (“beautiful woman”) which the researchers tried were on the money, as were 5% of adverb-verb mixes (“probably keep”).
研究者们还推测，即便那些不使用著名词语的人，仍然会倾向于使用在日常语言中常见的搭配模式，因而不是完全随机的。他们从“英国全国语料库”（牛津大学出版社编篡的包括一亿单词的语库）和谷歌的“N元组”语料库（NGram Corpus，从谷歌的网站浏览者用语中收集）随机抽取二联词，与亚马逊样本的联词口令进行了对比。果不其然，大众英语中常见的单词搭配方式与亚马逊用户选取的联词方式有很多重合之处。在研究者测试的形容词-名词组合（如“漂亮女人”）中，约13%是重合的；副词-动词组合（如“大概保持”）的重合率也有5%。
One way round that is to combine the ideas of a password and a passphrase into a so-called mnemonic password. This is a string of apparent gibberish which is not actually too hard to remember. It can be formed, for example, by using the first letter of each word in a phrase, varying upper and lower case, and substituting some symbols for others—“8” for “B”, for instance. (“itaMc0Ttit8” is thus a mnemonic contraction of the text in these brackets.) Even mnemonic passwords, however, are not invulnerable. A study published in 2006 cracked 4% of the mnemonics in a sample using a dictionary based on song lyrics, film titles and the like.
解决这个问题的办法之一是，综合密码和连词口令的各自优点，创造一种“易记密码”。它看起来像是一串毫无意义的字母或符号，但实际上并不难记忆。如，抽取一个句子中每个字的首位字母，区分大小写，并用一些符号替换字母（如用1替换y），我们可以得到这样一个易记密码：wXhf1。不过，易记密码也并不是无懈可击的，2006年发表的一项研究说，借助一本根据歌词、电影名字等编篡的字典，一个易记密码样本中4%的密码被破解。
The upshot is that there is probably no right answer. All security is irritating (ask anyone who flies regularly), and there is a constant tension between people’s desire to be safe and their desire for things to be simple. While that tension persists, the hacker will always get through.
这个问题可能永远没有正确答案。任何安全措施都是烦人的（经常坐飞机的人都知道），人们希望安全，但又希望什么事都简单易行，这两者总是冲突。只要这个冲突存在，黑客总是有机可乘。
扫码加好友，拉您进群
全部版块
我的主页
收藏
