I've taken the liberty of following your procedure for an un-named domain. If anyone's got a password cracker running, I'd be interested how long it takes to break this SHA256 hash: dae640f98b6894d2f6eab5755b22918be46b0d219ea10d3ceea06ebe538a75d1. Post once you've guessed it.
Just use 'pwgen -s 22'; it generates 128-bit passwords, which will never be guessed.
Still, I don't think it's that easy to figure out the ruleset of a good password generator if you make it obscure enough.
For example:
Amazon: NovemberAlphaies12#
Facebook: KiloFoxtrototto16&
What's the ruleset?
Answer: Phoenic alphabet of last + first letter of domain + italian number representing total letters in domain backwards + integer sum of the digits on either side of each digit in the Italian number + symbol representing sum of the digits of the previously calculated integer repeated until reduced to one digit.
Seems like way too much work for an attacker to try to figure out.
Amazon: ies12# Facebook: otto16&
"Otto" made me think 8, and that led me to "sei" (I read stuff upside down when reading to my kids, so I flip letter orders easily). It didn't take long to figure out those were the length of the site. So now we're down to....
Amazon: 12# Facebook: 16&
These follow a pattern (digit digit symbol), so even if I didn't notice that the symbols were only those above digits There are about 2000 possible choices. Or 11 bits of entropy.
I didn't understand your number scheme, but I probably don't need to.
Oh and if I understand the number scheme correctly:
> integer sum of the digits on either side of each digit in the Italian number
that means, when the number is "otto", meaning 8, the "digits on either side" are 7 and 9, which when you sum them, equal 7 + 9 = (8 - 1) + (8 + 1) = 8 + 8 = 16, so it's really a complicated way of saying "double that number" ... :-)
I dunno, seems like way more work to come up with, maintain, and actually use the generator. Seems easier to just click a bunch in my vault to generate and copy, although I guess you're protected from vault-theft?
Given your example, I had already figured out all the way up to ies/otto are probably foreign numbers (more specifically, otto looks like 8 and 16 looks like double of 8) before even seeing that you just gave the answer away.