In recent years, I created a homework assignment for a security class where the student's job is to crack a set of password files. First easy, un-salted hashes

In recent years, I created a homework assignment for a security class where the student's job is to crack a set of password files. First easy, un-salted hashes, then salted hashes, ... etc. To illustrate the badness of using dictionary words as a password, I randomly generated a unique password file for each user by sampling from /usr/share/dict/words. > One afternoon I thought, wait a minute, what's actually in Wordnet? I know exactly how you feel. It took me about 5 minutes to find Shutterstock's list of dirty, naughty, obscene, and otherwise bad words [1], and about 20 more minutes to add a blacklist check to my script. Fortunately none of the students had actually been given a bad word. Whew! [1] https://github.com/shutterstock/List-of-Dirty-Naughty-Obscene-and-Otherwise-Bad-Words https://github.com/shutterstock/List-of-Dirty-Naughty-Obscen...