3 ms·
You're looking under the flashlight. A better analysis could be done if it were compared with another password leak from another site. But even if there's no
by Peaker 13y ago
You're looking under the flashlight.
A better analysis could be done if it were compared with another password leak from another site.
But even if there's no better analysis, the best analysis may still be severely broken.
- xlfe 13y agoThanks for the feedback. I think it's debatable actually - while intersecting the list with another does give you less bias, it also reduces the sample size immensely (as happened in the 2011 analysis I linked to), so there are trade offs in both directions. I'm not claiming that I know exactly how many accounts reuse passwords - I am suggesting that, based on my estimate, it is more than half. The evidence (that I've linked to) supports this. There are other studies which show upto 60% of password reuse: http://www.troyhunt.com/2012/07/what-do-sony-and-yahoo-have-in-common.html http://www.troyhunt.com/2012/07/what-do-sony-and-yahoo-have-... If you can produce a better estimate please go ahead.
- Peaker 13y agoI don't doubt there is much password reuse. Like the original complaint, I don't think the data point has value because reusing passwords on same site implies nothing on different sites.