Those familiar with password cracking know that KoreLogic’s rule set for John the Ripper has become the de facto standard for password cracking. While updating the various rule sets is fine and dandy, but what about taking it a step further and rearranging the order in which they’re applied?