Isn't the downside of using any information that is personal to you that it massively reduces the scope of potential words and phrases that you would end up using?
There might be >97 million songs, but how many songs does one individual know well enough to decide to use them for a passphrase?
Possibly, but what are the chances that the attacker trying to crack a salted/derived key from your password knows you well, instead of being someone halfway around the world?
If a lot of your friends are trying to hack you ... maybe stop pissing people off? idk, that's an attempt at humor, but probably not a good one.
Comments
Isn't the downside of using any information that is personal to you that it massively reduces the scope of potential words and phrases that you would end up using?
There might be >97 million songs, but how many songs does one individual know well enough to decide to use them for a passphrase?
Possibly, but what are the chances that the attacker trying to crack a salted/derived key from your password knows you well, instead of being someone halfway around the world?
If a lot of your friends are trying to hack you ... maybe stop pissing people off? idk, that's an attempt at humor, but probably not a good one.