Of course, the comic is meant to be a joke, people are taking it far too seriously. It underestimates the entropy of the shorter password and overestimates the entropy of the longer password - it allows intelligent brute forcing on the shorter one, but doesn't allow it on the longer one. It's funny, but deeply flawed…