Re: [cryptography] Password Blacklist that includes Adobe's Motherload?

2013-11-15 Thread Jeffrey Goldberg
On 2013-11-15, at 1:33 AM, Jeffrey Goldberg jeff...@goldmark.org wrote: So if we find (and I haven’t correlated what I’m working on with actual passwords, so now this is hypothetical) that ioxG6CatHBw appears for the last block of the encryption of “password1”, then we know that that is the

Re: [cryptography] Password Blacklist that includes Adobe's Motherload?

2013-11-14 Thread Ben Laurie
On 14 November 2013 03:29, shawn wilson ag4ve...@gmail.com wrote: This is the only thing I've seen (haven't really looked): http://stricture-group.com/files/adobe-top100.txt I have to ask: snoopy1 more popular than snoopy? wtf? ___ cryptography

Re: [cryptography] Password Blacklist that includes Adobe's Motherload?

2013-11-14 Thread Patrick Mylund Nielsen
On Thu, Nov 14, 2013 at 5:57 PM, Ben Laurie b...@links.org wrote: On 14 November 2013 03:29, shawn wilson ag4ve...@gmail.com wrote: This is the only thing I've seen (haven't really looked): http://stricture-group.com/files/adobe-top100.txt I have to ask: snoopy1 more popular than snoopy?

Re: [cryptography] Password Blacklist that includes Adobe's Motherload?

2013-11-14 Thread Kevin W. Wall
On Thu, Nov 14, 2013 at 6:07 PM, Patrick Mylund Nielsen cryptogra...@patrickmylund.com wrote: On Thu, Nov 14, 2013 at 5:57 PM, Ben Laurie b...@links.org wrote: On 14 November 2013 03:29, shawn wilson ag4ve...@gmail.com wrote: This is the only thing I've seen (haven't really looked):

Re: [cryptography] Password Blacklist that includes Adobe's Motherload?

2013-11-14 Thread Jeffrey Goldberg
On 2013-11-13, at 8:13 PM, Jeffrey Walton noloa...@gmail.com wrote: Is anyone aware of a blacklist that includes those 150 million records from Adobe's latest breach? You are aware that these haven’t all been decrypted? (Or is there some news I’ve missed.) The passwords were encrypted,

Re: [cryptography] Password Blacklist that includes Adobe's Motherload?

2013-11-14 Thread ianG
On 15/11/13 06:35 AM, Kevin W. Wall wrote: Besides that, (unfortunately) it's a lot easier to change 'snoopy1' to 'snoopy2' then to 'snoopy3', etc. when your password inevitably changes. Plus, it makes a lot easier to remember than to start out with 'sn00py' and then go to 'sn11py', 'sn22py',

Re: [cryptography] Password Blacklist that includes Adobe's Motherload?

2013-11-13 Thread shawn wilson
On Wed, Nov 13, 2013 at 9:13 PM, Jeffrey Walton noloa...@gmail.com wrote: Hi All, Is anyone aware of a blacklist that includes those 150 million records from Adobe's latest breach? This is the only thing I've seen (haven't really looked): http://stricture-group.com/files/adobe-top100.txt I

Re: [cryptography] Password Blacklist that includes Adobe's Motherload?

2013-11-13 Thread nickg
Take a look at http://dazzlepod.com/uniqpass/ Previously, I’m just kept that file as is, and did a case-insentive binary search directly on disk… took maybe 10 seeks ~ 1ms to see if something was present or not and could be done via command line. No index required, no loading required. I’m