2 ms·
> The attack vector included the scanning and identification of externally facing services [..] which would be targeted with [..] passwords derived from third p
by fouc 8y ago
> The attack vector included the scanning and identification of externally facing services [..] which would be targeted with [..] passwords derived from third party data breaches.
This is an interesting notion, that people's home computers can be hacked by using their passwords from online data breaches.
- appleflaxen 8y agoIt's not their password, per se, it's just using low-entropy (=common) passwords to get access where people were lazy. And the best way to find common passwords is by using frequency analysis from prior breaches. It's definitely clever, but it's also not super innovative - kind of a standard tool in the toolbox.