Re: What has changed...
Exactly, you still need to brute force the hash of the key. A longer key will take longer to crack.
Some estimates around the web state it'll take around 8 days for a 10 char key on a relatively powerful machine. That's going to come down quickly in the coming years as CPUs/GPUs get faster.