Re:Mark Zuckerberg's Twitter and Pinterest password was 'dad...
by phpnode on Monday June 06, 2016 @10:35AM
(#11847063)
It bothered me more than it should have that you used [email protected] instead of [email protected] for your example :)
For example someone else may have had dadada as a password and [email protected] as their email, and their password was discovered via a separate breach on some other site. That other site used shit technology for securing people's passwords. [email protected] was in the linkedin dump.
People can probably guess that any hash for [email protected] will probably be 'dadada'. Now based on this information figuring out the hash for other users also using 'dadada' as their password is simpler. Multiply by many thousands of people reusing the same stupid password on all their sites.
In other words use a unique password and use a different unique password for each site and service you use. Use a password manager.