Comment

Comment by tansey

Worth noting that these passwords are all MD5 encrypted but not salted. There were also no creation rules enforced, as a quick check reveals:

Highest reused password count: 12023 "stratfor"? 12023 "password"? 517 "password1"? 46 "Password1"? 24 "123456"? 625 "12345678"? 74 "jesus"? 2 "love"? 7 "war"? 1 "michael"? 39 "america"? 7 "xbox360"? 0 "heroes"? 0

Those last 2 are popular for the battlefield heroes dataset and other gaming-related ones, so I keep them in my script as gaming sites are both highly targeted and usually poorly secured.

Anyway, it's clear that no rules were enforced as a 3-letter dictionary word like "war" would never be allowed by any rule creation system. The fact that "stratfor" was used by nearly 1.4% of all accounts (!) tells me that either their users did not value these accounts or they simply have no idea how passwords are supposed to work.

parent tansey 15 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton