5 ms·
A lot of these are good. Some not so much... passwords123 passwored12 password$qwerty qwertylol@me passwords123456 password123 pass
by oconnore 14y ago
A lot of these are good. Some not so much...
passwords123
passwored12
password$qwerty
qwertylol@me
passwords123456
password123
password111111
- brador 14y agoWhat's wrong with 3 and 4? It appears that, in general, the FBI staff are setting reasonable passwords. There are a few passwordNNN types but the majority are adequate and, in my opinion, would hold up well against a brute force vector, which is the primary purpose of password complexity.
- simias 14y agoThe fact that some of those passwords appear very strong also means they weren't bruteforced and therefore most likely stored in plaintext. I guess even the FBI have sloppy programmers...
- espadrine 14y agoThey say on the pastebin that one connexion sent passwords in clear text (through asipx-webadmin), so they probably were read there. At least it was probably an entry point.
- vibrunazo 14y ago3 and 4 would not take long to be brute forced by a dictionary attack, I think. Too many people use qwerty on their password, so it's probably high rated on a dictionary attack.
- nikic 14y ago3 and 4 are weak because we have pretty good heuristics on how passwords are composed so it wouldn't take much longer to brute-force them than it would to do password123.
- DanBC 14y agoI'd be interested to see if either 3 or 4 appear on existing password dictionaries.
- INTPenis 14y agoNot a single sentence, can it be that they allow characters like ( and % but not whitespace? Boggles my mind that people don't use more sentences.
- vibrunazo 14y agoThere's one ilovemydaughternancy with no spaces. Why would you want spaces?
- mapleoin 14y agoI find that typing a bunch of words with spaces is faster than with words. I guess my brain is wired by now to automatically press the spacebar between words.
- deleted 14y ago[deleted]
- vibrunazo 14y agoWouldn't it make it harder to remember which places accept a password with spaces and which don't? I already have trouble remembering which sites require long passwords and which require shorter ones.
- deleted 14y ago[deleted]
- dchest 14y agoThere's also lovenancy18. Someone will have a long talk with his daughter.
- INTPenis 14y agoSentences are easier to remember. Yet grammatically correct sentences can give you things like capital letter, whitespaces and even periods.
- ilitirit 14y agoThis one made me giggle: > ctsecuritiesfraud@ic.fbi.gov - fraudadmin
- cf0ed2aa-bdf5 14y agoI was also quite amused by: 12345678987654321
- abhishekdelta 14y agoThis is a fake news dude. Check this out: http://news.ycombinator.com/item?id=4678064 http://news.ycombinator.com/item?id=4678064