News for hackers. Stuff that matters.

A comment on Project Svalbard: The Future of Have I Been Pwned. Parent comment

Re:Project Svalbard: The Future of Have I Been Pwned by fjsolwmv on Tuesday June 11, 2019 @01:48PM (#20157726)
That doesn't work, because of hunter2 is in the PW database but hunter3 isn't, your system will think hunter3 is secure even though it's not.
[ Parent | on HN ]
Re:Project Svalbard: The Future of Have I Been Pwned by noisy_boy on Tuesday June 11, 2019 @02:22PM (#20158093)
I think it should be two step - checking against the list and if that passes, complexity check. Covers complex passwords that are known to have been in use/leaked and non-complex ones too.
[ Parent | on HN ]