3 ms·
I see this same explanation on the Twitter thread, which is great. However, I am concerned at how the OP got the string in the first place, that he compared to
by cyberferret 8y ago
I see this same explanation on the Twitter thread, which is great.
However, I am concerned at how the OP got the string in the first place, that he compared to HaveIBeenPwned? Is he storing his user's passwords in plain text in his back end database, and decided to run them all against the service?? That in and of itself is a security red flag.
- deleted 8y ago[deleted]
- geofft 8y agoI am reading this as OP looking at password breach databases (which are, by definition, public and plaintext already), not OP running a service with password registration themselves.
- astura 8y agoLists of common passwords compiled from previous data breaches are readily available online.