News for hackers. Stuff that matters.

A comment on Show HN: 5+ Billion Passwords in Order of Most Popular. Parent comment

Re:Show HN: 5+ Billion Passwords in Order of Most Popular by neuroid on Sunday June 11, 2017 @05:59PM (#14534026)
I don't know anybody that would do a sequential scan over a file in production

Well, that's pretty much how one would try to crack a password using a wordlist.

EDIT: If the goal is to crack a bunch of properly hashed (PBKDF2, scrypt, etc.) and salted passwords then a lookup table is not very practical.

[ Parent | on HN ]
Re:Show HN: 5+ Billion Passwords in Order of Most Popular by jacquesm on Sunday June 11, 2017 @06:11PM (#14534076)
If you're trying to crack 'a password' you're doing it wrong. Alternatively, you're doing something illegal.

That's not why these lists are made public (though I can appreciate the fact that they are 'dual use').

[ Parent | on HN ]
Re:Show HN: 5+ Billion Passwords in Order of Most Popular by edoceo on Monday June 12, 2017 @12:21AM (#14535183)
PP is talking about a lookup, you are talking about cracking. Different things. For lookup of a string match make an index.
[ Parent | on HN ]