Re:Hacker, Hack Thyself
by infogulch on Friday June 02, 2017 @11:33AM
(#14470633)
My question is, is 10k good enough? Wouldn't it be better to check against more? 50k?
[ Parent
| on HN ]
Presumably more is always better, but there's a very long tail of passwords so the hit rate will drop off a cliff, and now you're storing 5x as much data for increasingly questionable benefit.
Re:Hacker, Hack Thyself
by codinghorror on Friday June 02, 2017 @03:07PM
(#14472532)
the problem is once you get to 10+ char passwords the common password list gets really tiny