Live data from Hacker News

"Pwned Passwords" V2 With Half a Billion Passwords

troyhunt.com

281–290 of 369 posts

Re: "Pwned Passwords" V2 With Half a Billion Passwords

#281

Am I the only one here who thinks typing your password to a stranger's website is a risk? How do you know he does not log it? how do you know he was not hacked and someone is not logging all passwords that are not on the list YET.

the website does not send your password to their api but the first 5 chars of an sha1 of your password

Re: "Pwned Passwords" V2 With Half a Billion Passwords

#282

I think it would be interesting to do an art project with this data - some of these passwords are funny and/or revealing. Some examples: pooplasagna - 3 times eggsarebad - 3 times eggsaregood - 25 times myhusbandcheats - 4 times icheatonmywife - 1 time ihatemyneighbors - 2 times iamanalcoholic - 6 times 1yearsober - 31 times imissmykids - 51 times imissmyparents - 6 times

6618 people love life, 1367 want to die.

893 people like turtles, 170 love turtles, 155 love everyone (363 people hate everyone though and 428 hate us all).

4301 people love their dog, 3 fuck their dog, 3 killed their dog (only one person killed their cat)

110 people are killers, 4 kill for money, 1 is a murderer. 68 want to kill, 24 kill for fun :-/

2781 love their wife, 552 love their husband. 68 people hate their wife, 38 hate their husband. 3823 people love their son, 17 hate their son. 212 love their daughter, 3 hate their daughter. 11 siblings are having sex with one another. 3 have sex with their dad, 5 have sex with their mom.

6 people save the cheerleader, 11 people save the world. 1 person is the president. 4 people are obama, only one person is trump. The password donaldtrump is almost 5 times more popular than barrackobama.

339 people love sun, 559 love rain.

114 people are healthy, 216 are sick. 108 people are old, 3 people are too old. 15 people sleep well. 80 people run fast, 6 people run faster. 1 person is the fastest (obviously).

All this is quite facinating and fun .. and partly disquieting.

jesus - 123279 times, lordjesus - 8187, satan - 11662 times, iamgod - 8834, iamjesus - 345 times, jesussucks - 100 times

Re: "Pwned Passwords" V2 With Half a Billion Passwords

#283
post #236

Earlier quoted context omitted.

I don't want to be distributing pre-compiled binaries because I don't want others to trust random pre-compiled binaries. The plan as I said is to get pgen into some package manager repos. Until then building from source will be the only way I will encourage anyone to get a copy of my tool.

I don't think encouraging people to download the precompiled Rust binaries and then blindly compile code downloaded from crates.io is that much different in practice to providing your binaries.

I linked the GitHub repo first. The code is short and the assumption is that you would have a quick glance over the source before you compile it.

Re: "Pwned Passwords" V2 With Half a Billion Passwords

#286
post #284

Earlier quoted context omitted.

Northern English

And Northern Irish.

Personally I hear 'ma' more in Northern Ireland, never heard 'mam' (although maybe I am mishearing).

mam - https://en.wiktionary.org/wiki/mam#English

ma - https://en.wiktionary.org/wiki/ma#English

Re: "Pwned Passwords" V2 With Half a Billion Passwords

#289
post #285

How trustworthy is /haveibeenpwned.com? Is there a chance the password people enter there for checking will end up in the databases?

The article explains how the site has been designed not to send passwords to the server. Of course, it's up to you to decide if you trust them to keep it that way.
Post reply on HN