http://security.stackexchange.com/questions/46625/is-it-legal-to-publish-viticims-password-and-email http://security.stackexchange.com/questions/46625/is-it-leg

http://security.stackexchange.com/questions/46625/is-it-legal-to-publish-viticims-password-and-email http://security.stackexchange.com/questions/46625/is-it-lega... I thought of exactly the same. I was motivated by the password strength meter out there. How can you actually tell a password is strong or not or whether a password is known to attacker or not if you can ask (I was thinking along the line of private information retrieval) privately and get a probability rather than a yes/no based on all the known stolen credential out in the Internet (there are many Gbs files you can download)...