3 ms·
How to practically check for common passwords? Ideal would be to have like the most common 1/1000th of the hibp so that it's not too big for deployment in some
by yread 5y ago
How to practically check for common passwords? Ideal would be to have like the most common 1/1000th of the hibp so that it's not too big for deployment in some clever structure (compressed trie? bloom filter?). I don't trust 3rd party services.
- quickthrower2 5y agoHave you heard about https://haveibeenpwned.com/Passwords https://haveibeenpwned.com/Passwords ?
- quickthrower2 5y agoSorry I reread and you said hibp so you know! Why not use the entire set?
- yread 5y agoBecause it's 12.6GB compressed! That's just too large to deploy. I want a much smaller part. And I would prefer the actual passwords because I think they could be compressed much better than the (essentially random) hashes.