Re:Lessons from a Professional Password Cracker
by jeroenhd on Monday September 26, 2022 @12:45PM
(#32985303)
Whoops, you're right, got the API confused. You can't just search for email addresses.
Still, though, you can implementtthis check every time someone logs in (and the password is transfered over the wire) which should catch most bad passwords/password reuse cases.
Still, though, you can implementtthis check every time someone logs in (and the password is transfered over the wire) which should catch most bad passwords/password reuse cases.