6 ms·

Can you name the most used passwords of all time?

1 points by edw519 17y ago

edw519 17y ago
I got 4. (No, I'm not that kind of hacker.)
dfhfhd 17y ago
What a stupid interface - it counts 'pass' as a hit when you're typing 'password' etc.
pbhjpbhj 17y ago
In other words: we're looking to update our top password lists that we use for site cracks &c., please give us your top passwords, check your own isn't there (go on what harm can it do) - we promise we'll tie those to your history profile via the referer information (and js history hacks!), then we'll run an automated attack against all the top social sites using your passwords you entered. If we're really lucky we might be able to sniff a username cookie and badda-bing, we're in. Have a nice day!
- Jem 17y ago
  You're taking it a bit too seriously - this is a well known quiz site that features other popular quizzes such as "How many Simpsons characters can you name?" Given that the answers (passwords) are things like "password", "qwerty" and "1234", I would hope that no HN member is currently using any of them.
  - dasil003 17y ago
    Hopefully pg stores the passwords in plaintext so he can set up a quiz like this for HN passwords just to be sure.
  - pbhjpbhj 17y ago
    Your bank is running a prize draw for loyal customers - Fill in your bank account number to see if you've already won a prize: Please add your full name, phone number and main email address so that we can contact you about your winnings:
    - Jem 17y ago
      I could give you my bank account number, name, phone number and email address and it would make no difference. My bank uses none of these things to identify me.
      - pbhjpbhj 17y ago
        Really? What do they use? Do you think I could find when you're on holiday, then call the bank [apparently] from your phone number and with the account details and say "my brother has been killed interrupting a robbery, could you halt the account" ... would that make a difference? I wonder if they'd need anything more than a [forged] death certificate to cash out the account? You carry plenty of cash on holiday don't you, so that when your accounts stopped you can get home quickly? a little info + social engineering >= lots of hassle
        Jem 17y ago
        My bank use a unique 12 digit number and a PIN I've chosen (and THEN my full name, address, etc). I don't have my account set up for telephone banking. I don't go on holidays, except perhaps local expeditions. Easy peasy to get home. Your forged death certificate wouldn't get you very much - I keep the majority of my money in other accounts. Don't get me wrong, although I keep my money fairly secure I know what you're getting at. But, I think it's a big leap of faith to assume that someone who has a go at guessing known easy passwords is also going to fill in their bank account details too.

1 points by edw519 17y ago

edw519 17y ago

I got 4. (No, I'm not that kind of hacker.)

dfhfhd 17y ago

What a stupid interface - it counts 'pass' as a hit when you're typing 'password' etc.

pbhjpbhj 17y ago

In other words: we're looking to update our top password lists that we use for site cracks &c., please give us your top passwords, check your own isn't there (go on what harm can it do) - we promise we'll tie those to your history profile via the referer information (and js history hacks!), then we'll run an automated attack against all the top social sites using your passwords you entered. If we're really lucky we might be able to sniff a username cookie and badda-bing, we're in. Have a nice day!

Jem 17y ago
You're taking it a bit too seriously - this is a well known quiz site that features other popular quizzes such as "How many Simpsons characters can you name?" Given that the answers (passwords) are things like "password", "qwerty" and "1234", I would hope that no HN member is currently using any of them.
- dasil003 17y ago
  Hopefully pg stores the passwords in plaintext so he can set up a quiz like this for HN passwords just to be sure.
- pbhjpbhj 17y ago
  Your bank is running a prize draw for loyal customers - Fill in your bank account number to see if you've already won a prize: Please add your full name, phone number and main email address so that we can contact you about your winnings:
  - Jem 17y ago
    I could give you my bank account number, name, phone number and email address and it would make no difference. My bank uses none of these things to identify me.
    - pbhjpbhj 17y ago
      Really? What do they use? Do you think I could find when you're on holiday, then call the bank [apparently] from your phone number and with the account details and say "my brother has been killed interrupting a robbery, could you halt the account" ... would that make a difference? I wonder if they'd need anything more than a [forged] death certificate to cash out the account? You carry plenty of cash on holiday don't you, so that when your accounts stopped you can get home quickly? a little info + social engineering >= lots of hassle
      - Jem 17y ago
        My bank use a unique 12 digit number and a PIN I've chosen (and THEN my full name, address, etc). I don't have my account set up for telephone banking. I don't go on holidays, except perhaps local expeditions. Easy peasy to get home. Your forged death certificate wouldn't get you very much - I keep the majority of my money in other accounts. Don't get me wrong, although I keep my money fairly secure I know what you're getting at. But, I think it's a big leap of faith to assume that someone who has a go at guessing known easy passwords is also going to fill in their bank account details too.