3 ms·
> But they aren't going to target me specifically? They won't. They just find everyone whose password across multiple breaches is similar (Levenshtein distance
by Santosh83 9y ago
> But they aren't going to target me specifically? They won't. They just find everyone whose password across multiple breaches is similar (Levenshtein distance or something) and brute force the differences.
Is this possible when the leaked passwords are all only salted hashes?
- snowwolf 9y agoYou mean like LinkedIn (SHA1 hashes without salt), Adobe (Poor Crypto), Dropbox (half of them SHA1), etc., etc. [1] https://haveibeenpwned.com/PwnedWebsites#LinkedIn https://haveibeenpwned.com/PwnedWebsites#LinkedIn [2] https://haveibeenpwned.com/PwnedWebsites#Adobe https://haveibeenpwned.com/PwnedWebsites#Adobe [3] https://haveibeenpwned.com/PwnedWebsites#Dropbox https://haveibeenpwned.com/PwnedWebsites#Dropbox
- arghwhat 9y agoNo, but not everyone follow good crypto practices...