6x Space does not show up as pwned password

Posted by throwaway77384 on Monday March 04, 2019 @03:29AM
from the self-post dept.

https://haveibeenpwned.com/Passwords

If you type in spaces (any number, I used 6 here), they are not detected or evaluated as pwned passwords. I thought that was curious.

Seems this could possibly mislead some to think they are being clever by entering just spaces as a password.

Does anyone know the exact reason for this? Is it simply impossible to query this as a record in their DB? Would a password field usually not accept spaces?

( 2 comments | 3 points | on HN )

Re:6x Space does not show up as pwned password by teapot01 on Tuesday March 05, 2019 @06:14PM (#19315119)

I'm only guessing, but in the blog posts about the password search feature he said there was a lot of cleanup of badly formatted files it's possible that the whitespace got ignored?

[ Parent | on HN ]

Re:6x Space does not show up as pwned password by nmc on Monday March 04, 2019 @05:08AM (#19300097)

You could ask the maintainer: https://www.troyhunt.com/contact/

[ Parent | on HN ]