-
Bruce Schneier, on the other hand:
This is why the oft-cited XKCD scheme for generating passwords -- string together individual words like "correcthorsebatterystaple" -- is no longer good advice. The password crackers are on to this trick.
It's not a trick that depends on the password crackers not being "onto it", it's an algorithm that might output any one of 244 possible strings, all of which are reasonably easy for a person to memorise. See the comments on Bruce's article for details.
Because cartoons are the best source of security advice...
Bruce Schneier, on the other hand: