11–20 of 28 posts
How comes that 'homelesspa' ranks 13 on the most used passwords? I mean, I understand why '123456' and 'password' are in the list, but a seemingly random combination of words such as 'homelesspa'? I did found this: https://twitter.com/clinton_ngn/status/736247662866006018 But no real explanation
Title is exaggerating; this "single database" is actually an aggregate of many previous breach dumps.
Which makes the aggregate a single database.
Anyone can compile a list such as this from other big dumps without much trouble, you just need some disk space.
Earlier quoted context omitted.
Which makes the aggregate a single database.
Yes, but it is not like a single service has been breached to leak that many accounts, significantly reducing the relevance and impact of this particular database. Anyone can compile a list such as this from other big dumps without much trouble, you just need some disk space.
Err, it actually increases its relevance and impact. With the same database now a hacker can reach multiple services...
This database makes finding passwords faster and easier than ever before. As an example searching for “admin,” “administrator” and “root” returned 226,631 passwords of admin users in a few seconds.
Out of 1.4B credentials there are only 226K for admin, administrator and root?
How comes that 'homelesspa' ranks 13 on the most used passwords? I mean, I understand why '123456' and 'password' are in the list, but a seemingly random combination of words such as 'homelesspa'? I did found this: https://twitter.com/clinton_ngn/status/736247662866006018 But no real explanation
This seems odd: This database makes finding passwords faster and easier than ever before. As an example searching for “admin,” “administrator” and “root” returned 226,631 passwords of admin users in a few seconds. Out of 1.4B credentials there are only 226K for admin, administrator and root?
Earlier quoted context omitted.
Which makes the aggregate a single database.
Yes, but it is not like a single service has been breached to leak that many accounts, significantly reducing the relevance and impact of this particular database. Anyone can compile a list such as this from other big dumps without much trouble, you just need some disk space.
> I have compiled it, I just want to show how big is password reuse problem for security community, and how easy was to crack those hashes using open source software.
https://www.reddit.com/r/netsec/comments/7ikbzo/14_billion_c...
Odd thing, I checked with other people, and they don't remember those as old passwords.
I even found passwords I don't remember...
Where can I download this dump so I can find out if any of my accounts are in it?
Not a link to the DB but a great relevant service: https://haveibeenpwned.com/