4 ms·
My black hat method is much easier than that, and it doesn't even require a black hat skillset. 1) Download two datasets from different massive breaches. You c
by saosebastiao 10y ago
My black hat method is much easier than that, and it doesn't even require a black hat skillset.
1) Download two datasets from different massive breaches. You can find plenty of them with plaintext passwords on any torrent tracker.
2) Correlate email and password combos across datasets. Don't worry, you'll find 10s of millions of people who don't use password managers and reuse passwords.
3) profit
If you have reason to believe you're being targeted, any breach is a problem. But until my method no longer produces results, theres no reason to believe black hats will go through any additional effort to obtain the average person's creds.