[SebFender]

It doesn't work that way - and if it did - it's absolutely acceptable in most, if not all systems. A year to "break something" is absolutely considered secure in risk management of larger systems.

[4death4]

How does it not work that way? Password cracking is infinitely parallelizable.

[SebFender]

Technically yes - but when it comes to attacks not really. If someone wants it, you have much easier and faster techniques.