5 ms·

>> "None of the passwords contain a colon, because that is the delimiter used to separate usernames and passwords in the combo lists my scripts generate." tldr

• VikingCoder 15y ago
  >> "My scripts only grab usernames and passwords between 3 and 30 characters long, all others are thrown out." tldr; Put colons in your passwords, and make sure your password is 31 characters long. I bet it would also make sense to include "username:" in your password. For instance: username: VikingCoder password: username:CorrectHorseBatteryStaple Or how about like this: username: VikingCoder password: '); DROP TABLE Passwords;
  • xanadohnt 15y ago
    That's some dedication to Bobby Tables just one person. ;)
  • chimeracoder 15y ago
    The problem is that you may also erase the entire database of the server you're trying to log into: http://xkcd.com/327/ http://xkcd.com/327/ I guess that's one way of protecting your accounts from being hacked, though... you can't hack an account that no longer exists!
    • VikingCoder 15y ago
      Think about it - do you really want to use a site... that's vulnerable to SQL injection attacks? If my password erases their DB, then I didn't want my password on their DB in the first place!
      • chris_wot 15y ago
        That's assuming they have a database table called "Password". I'd use: '); DROP DATABASE;
• gvb 15y ago
  That only works for his database of username:password combinations due to how he stores them. It won't protect you from someone else's database of password combinations. Since he collects only publicly available username/password combinations, you're already screwed and avoiding his list is slamming the door after the horse is gone.
  • m8urn 15y ago
    Thanks for pointing that out, my list comes from public sources.