Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

AdultFriendFinder.com

103,070,536 passwords already plainly visible

232,137,460 passwords hashed with SHA1

99.3% of all passwords from this website are now plaintext (cracked).

As someone who cares about security, this is very, very painful to read. But it also makes me curious about that password data set. It might be used for security research, like estimating the entropy of passwords more accurately.



I'm shocked that developers of such sensitive website would do this. Were the owners cheap and hired some offshore team for pennies?


You can always assume this.


It definitely shows how terrible people are at password generation and reuse but even more so how little it matters on individual sites if those folks have no understanding or don't care about protecting passwords. Yet people keep using 123456 as a password.


Lots of bots and throwaway on AdultFriendFinder. It's normal to have many users using "123456" and the likes, they are not real users.


I use silly passwords at sites where I don't care about security and don't want to be correlated with my other accounts elsewhere. Does this mean I'm bad at password generation and reuse? ;)


> if those folks have no understanding or don't care about protecting passwords

I suspect that or is an and in a lot of cases as well.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: