Re: Can a grownup, please...?
"If you string four of those words together at random...
And sure, you can add random shit to it to make it harder to guess..."
Or, and this might sound crazy, you could string more than four words together. XKCD didn't have it wrong, it just underestimated the ability of people to understand the actual point. If you take it as instructions that you must always use exactly four words, no more, no less, then yes, it's easy to come up with other schemes that are more secure. But if you understand the actual point - that words are much easier to string together into long, easily remembered sequences than a selection of random symbols - then the fact that secure passwords are actually quite easy should be clear.