[lhorie]

Sure, sure, it could be both. It could be my girlfriend looking over my shoulder too. But of course, I don't use an stupidly easy password and I don't let my girlfriend see me typing it (2-finger typing style, of course). I mean who does that, right? </sarcasm> :)

I just find it interesting to observe the discrepancies between perception of security and actual math-backed security.

[tptacek]

I don't use a stupidly easy password either, but I'm not going to give you the password hash from my laptop. That's what this scheme does.