Comment by bunga-bunga

This specific attack could also be easily mitigated by dictating your passwords instead.