News for hackers. Stuff that matters.

A comment on Most common passwords list from 3 databases.

Re:Most common passwords list from 3 databases by snprbob86 on Sunday March 29, 2009 @08:52PM (#538045)
Why aren't these sites storing salted hashes? Plain text passwords are bad news...
[ Parent | on HN ]
Re:Most common passwords list from 3 databases by dreish on Sunday March 29, 2009 @09:24PM (#538064)
Where did you get that impression? Not from the linked-to article, from my reading of it.
[ Parent | on HN ]
Re:Most common passwords list from 3 databases by hbien on Sunday March 29, 2009 @09:37PM (#538071)
If a site is storing hashed passwords with salts, you generally don't know what the user's password is and you can't unhash them to find out.
[ Parent | on HN ]
Re:Most common passwords list from 3 databases by dreish on Sunday March 29, 2009 @09:42PM (#538073)
Right, and what does that have to do with this article about lists obtained by phishing and the like?
[ Parent | on HN ]
Re:Most common passwords list from 3 databases by hbien on Sunday March 29, 2009 @10:30PM (#538108)
My mistake, I thought these passwords came straight from the databases.
[ Parent | on HN ]