3 ms·
So your password has a root password and probably 2-4 pseudo random characters appended/prepended/replaced? That means once it has been leaked in 1 breach, your
by snowwolf 9y ago
So your password has a root password and probably 2-4 pseudo random characters appended/prepended/replaced?
That means once it has been leaked in 1 breach, your 'true' algorithmic password is only 2-4 characters long. Which should take a few minutes to crack on other sites.
And the more breaches you are included in, the easier it would be to work out your algorithm, reducing the number of attempts further.
But they aren't going to target me specifically?
They won't. They just find everyone whose password across multiple breaches is similar (Levenshtein distance or something) and brute force the differences.
- Santosh83 9y ago> But they aren't going to target me specifically? They won't. They just find everyone whose password across multiple breaches is similar (Levenshtein distance or something) and brute force the differences. Is this possible when the leaked passwords are all only salted hashes?
- snowwolf 9y agoYou mean like LinkedIn (SHA1 hashes without salt), Adobe (Poor Crypto), Dropbox (half of them SHA1), etc., etc. [1] https://haveibeenpwned.com/PwnedWebsites#LinkedIn https://haveibeenpwned.com/PwnedWebsites#LinkedIn [2] https://haveibeenpwned.com/PwnedWebsites#Adobe https://haveibeenpwned.com/PwnedWebsites#Adobe [3] https://haveibeenpwned.com/PwnedWebsites#Dropbox https://haveibeenpwned.com/PwnedWebsites#Dropbox
- arghwhat 9y agoNo, but not everyone follow good crypto practices...