News for hackers. Stuff that matters.

A comment on Your Pa$$Word Doesn't Matter. Parent comment

Re:Your Pa$$Word Doesn't Matter by closeparen on Thursday November 12, 2020 @02:55PM (#25074119)
Wonder if anyone has ever written password validation to attempt credential stuffing on a few popular websites and reject the password if it works.
[ Parent | on HN ]
Re:Your Pa$$Word Doesn't Matter by WorldMaker on Thursday November 12, 2020 @03:00PM (#25074169)
Pwned Passwords is a most common password (hashes) database compiled from years of breach data: http://haveibeenpwned.com/Passwords

Though the takeaway in the article is that you really only need to check Top X and Top X may be as low as 10 assuming other mitigations are in place.

[ Parent | on HN ]