4 ms·
Once the huge password Torrent is updated with Pemiblanc (9 GB, last updated March 1, 2018), you can download it and scan it for all your passwords locally. Th
by cgijoe 8y ago
Once the huge password Torrent is updated with Pemiblanc (9 GB, last updated March 1, 2018), you can download it and scan it for all your passwords locally. Then you can determine which are pwned. You'll have to SHA-256 them all, but that shouldn't be too hard.
- notananthem 8y agoI've never tried to follow up with which accounts/passwords have been used from haveibeenpwned, can you describe this further as I'll try this. The "huge pw torrent" is something I can just search on torrent trackers? Once I have the list, its just a list of passwords, or includes the emails? Then they're sha-256 hashed and I need to ..unhash them?
- qwerfasdcva 8y agoI also want to see this.
- snailmailman 8y agoI think he is referring to Troy Hunts pwned password list.(which is about 9gb, afaik) Presumably it will be updated with these new plaintext passwords. Once it’s updated, you can check all your passwords against the list. It’s a list of sha256-hashed passwords.(so he isn’t sharing tons of plaintext passwords, as sha256 can’t be reversed) You would sha256 your own passwords and check them all against the list. Edit: to clarify, I think there are tools to help check against the offline list pretty easily. Or you could also query Troy hunts pwned password page (or its api)once it’s updated; instead of downloading 9gb. The k-anonymity model is pretty clever, and querying the site should be secure.
- DEADBEEFC0FFEE 8y agoI think Firefox is going to use Trent's list to check passwords use when browsing. That would actually make Firefox more functionally useful that other browsers.
- DEADBEEFC0FFEE 8y agohttps://thenextweb.com/security/2018/06/26/mozilla-bakes-have-i-been-pwned-into-firefoxs-new-privacy-tool/ https://thenextweb.com/security/2018/06/26/mozilla-bakes-hav...
- dmckeon 8y agoCheck out a lower bandwidth approach: https://www.troyhunt.com/ive-just-launched-pwned-passwords-version-2/#cloudflareprivacyandkanonymity https://www.troyhunt.com/ive-just-launched-pwned-passwords-v...
- ElCapitanMarkla 8y agoThanks for pointing that link out, I hadn't come across that API before.