Posted September 07, 2021 by Grahame @ Understory Games
Made a few updates in the text to fix up some consistency notes based on some feedback. There was some stuff that wasn't intentionally confusing, but could definitely be confusing. So, smoothed those out and re-uploaded the files (Singles, spreads, and plain-text). So, this update contains minor tweaks that should clarify those points.
(Thanks again to Richard from Sprinting Owl Games for catching those)
For those curious: A Password Spray attack, in reality, is a type of brute-force attack. In it, a hacker would take a list of usernames or email addresses, and blast the login portal with login attempts using the same password for each account. Usually, it's one of the most common passwords, or something out of a common password dictionary.
With brute-force attacks in general, it's more about quantity than quality. Password Sprays are no different: Eventually, you're going to find one person who set their password to "Password1!" And, if you're trying to get access, one person is all you need, really.