3 ms·
This guy only used 302 from a dump of 453,491 passwords to come to these conclusions. I can imagine no reason why he'd intentionally invalidate his analysis by
by omni 14y ago
This guy only used 302 from a dump of 453,491 passwords to come to these conclusions. I can imagine no reason why he'd intentionally invalidate his analysis by using such a low sample size unless this conclusion doesn't actually hold when you use a significant sample. I am highly skeptical.
- biot 14y agoI read it differently: "This is from a sample size of 302 common accounts and unsurprisingly, the strength of those passwords leaves a lot to be desired:" The word "this" refers to the passwords list after the colon, not the preceding analysis. It really should have been written as "The following list of weak passwords is from a sample size of 302...".
- troyhunt 14y agoThe emphasis should have been on "common" - there were only 302 emails out of the full sample which appeared in both breaches. I would have like a larger sample size, but that's all there was.
- omni 14y agoAh, my mistake. Thanks for clarifying!