21–28 of 28 posts
Earlier quoted context omitted.
Not a link to the DB but a great relevant service: https://haveibeenpwned.com/
Rather often quite incomplete, often only has partials of dumps he claims to have added and when this was pointed out he didn't want to add the rest - didn't even want to change the description of the dumps to say they were incomplete
This seems odd: This database makes finding passwords faster and easier than ever before. As an example searching for “admin,” “administrator” and “root” returned 226,631 passwords of admin users in a few seconds. Out of 1.4B credentials there are only 226K for admin, administrator and root?
I think that would explain why admin, administrator and root are rarely used as usernames.
How comes that 'homelesspa' ranks 13 on the most used passwords? I mean, I understand why '123456' and 'password' are in the list, but a seemingly random combination of words such as 'homelesspa'? I did found this: https://twitter.com/clinton_ngn/status/736247662866006018 But no real explanation
Could be added to detect who is scanning with this list. Akin to mapmakers adding fake streets.
Earlier quoted context omitted.
Could be added to detect who is scanning with this list. Akin to mapmakers adding fake streets.
Map makers add fake streets to mark their maps?
This seems odd: This database makes finding passwords faster and easier than ever before. As an example searching for “admin,” “administrator” and “root” returned 226,631 passwords of admin users in a few seconds. Out of 1.4B credentials there are only 226K for admin, administrator and root?
Title is exaggerating; this "single database" is actually an aggregate of many previous breach dumps.
proceeds to list domain names that are aliases of one another
Also the whole describing the thing as a database and saying it's fast because it's alphabetical...
At least describe what kind of database you're talking about so we can understand why an index isn't possible.
Where can I download this dump so I can find out if any of my accounts are in it?
https://www.reddit.com/r/pwned/comments/7hhqfo/combination_o...
About 7/10 frequently contacted people were in the database (...!). About half of those let me know that the passwords were not in use anymore. The other half was very, very grateful...!
It was a great time to remind them about password managers, 2fa, etc.