5 ms·
I've never tried to follow up with which accounts/passwords have been used from haveibeenpwned, can you describe this further as I'll try this. The "huge pw to
by notananthem 8y ago
I've never tried to follow up with which accounts/passwords have been used from haveibeenpwned, can you describe this further as I'll try this.
The "huge pw torrent" is something I can just search on torrent trackers? Once I have the list, its just a list of passwords, or includes the emails? Then they're sha-256 hashed and I need to ..unhash them?
- qwerfasdcva 8y agoI also want to see this.
- snailmailman 8y agoI think he is referring to Troy Hunts pwned password list.(which is about 9gb, afaik) Presumably it will be updated with these new plaintext passwords. Once it’s updated, you can check all your passwords against the list. It’s a list of sha256-hashed passwords.(so he isn’t sharing tons of plaintext passwords, as sha256 can’t be reversed) You would sha256 your own passwords and check them all against the list. Edit: to clarify, I think there are tools to help check against the offline list pretty easily. Or you could also query Troy hunts pwned password page (or its api)once it’s updated; instead of downloading 9gb. The k-anonymity model is pretty clever, and querying the site should be secure.
- DEADBEEFC0FFEE 8y agoI think Firefox is going to use Trent's list to check passwords use when browsing. That would actually make Firefox more functionally useful that other browsers.
- DEADBEEFC0FFEE 8y agohttps://thenextweb.com/security/2018/06/26/mozilla-bakes-have-i-been-pwned-into-firefoxs-new-privacy-tool/ https://thenextweb.com/security/2018/06/26/mozilla-bakes-hav...