News for hackers. Stuff that matters.
Re:Hacker, Hack Thyself by infogulch on Friday June 02, 2017 @11:33AM (#14470633)
My question is, is 10k good enough? Wouldn't it be better to check against more? 50k?
Re:Hacker, Hack Thyself by gwern on Friday June 02, 2017 @12:27PM (#14471129)
Presumably more is always better, but there's a very long tail of passwords so the hit rate will drop off a cliff, and now you're storing 5x as much data for increasingly questionable benefit.
Re:Hacker, Hack Thyself by codinghorror on Friday June 02, 2017 @03:07PM (#14472532)
the problem is once you get to 10+ char passwords the common password list gets really tiny