Rob’s Required Reading December 24, 2021 Attackers don’t bother brute-forcing long passwords, Microsoft engineer says “A password over 10 characters was only seen in 6% of cases…”