3 ms·
> There's lots to be learned about wordwordnumber wordnumbernumber, and so on. i had a plan to do statistical studies of some password dumps to try and make a
by genewitch 1y ago
> There's lots to be learned about wordwordnumber wordnumbernumber, and so on.
i had a plan to do statistical studies of some password dumps to try and make a "compressed password list" that could generate password guesses on the fly, and i forgot why i didn't do it, but i'm sure it's because the "model" - the statistical dataset upon which the program would generate output, wouldn't really be that much smaller; at least not with my poor maths skills.
I'm assuming that someone who really knew what they were doing could get close to 20% - 15% of the full password list. I doubt i could do better than just compressing the dataset and extracting it on the fly.
- NitpickLawyer 1y ago> I doubt i could do better than just compressing the dataset and extracting it on the fly. The meta in that field is to extract "rules" (i.e. for hashcat) from datasets. Then you run the rules over the encrypted dumps. Rules can be word^number^number, word^number^word^number, or letter^upper^number^lower... etc. Then you build a dictionary and dict + rules = passwords. Pretty sure you can extract some nice signals nowadays with embeddings and what not.