> Many banks still use 4 digit PINs on their ATM cards, without problem. > Possession is a very important factor.
well, posscession and the fact that you only get three attempts to enter the PIN (in the UK at least), so brute force attacks are a non-starter, so limited kyspace is much less of a problem. -Steve