News for hackers. Stuff that matters.

A comment on I hate password rules. Parent comment

Re:I hate password rules by yread on Tuesday November 16, 2021 @03:05PM (#29245743)
How to practically check for common passwords? Ideal would be to have like the most common 1/1000th of the hibp so that it's not too big for deployment in some clever structure (compressed trie? bloom filter?). I don't trust 3rd party services.
[ Parent | on HN ]
Re:I hate password rules by quickthrower2 on Tuesday November 16, 2021 @03:29PM (#29245981)
Have you heard about https://haveibeenpwned.com/Passwords ?
[ Parent | on HN ]
Re:I hate password rules by quickthrower2 on Tuesday November 16, 2021 @06:22PM (#29247532)
Sorry I reread and you said hibp so you know! Why not use the entire set?
[ Parent | on HN ]
Re:I hate password rules by yread on Wednesday November 17, 2021 @03:14AM (#29250295)
Because it's 12.6GB compressed! That's just too large to deploy. I want a much smaller part. And I would prefer the actual passwords because I think they could be compressed much better than the (essentially random) hashes.
[ Parent | on HN ]