The passwords, dumped on a cyber-underground forum on July 4 by a hacker called “ObamaCare” were collected from a variety of older and more recent breaches.

  • John Richard@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    2 months ago

    I don’t think they publish any new leaks but instead use other leaks to make a list for password crackers.

    • BrikoXOPM
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 months ago

      Indeed. It’s just a compilation of unique records.

  • IllNess@infosec.pub
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 months ago

    “The dataset is too large to be of any realistic use as part of any effort to crack a given hash — it’s simply too much low-quality data to successfully use in attacks — and the value of the data is negligible compared to good prepared wordlists and rulesets in the hands of a capable actor," says Darren James, a senior product manager at Specops Software.

    At 10 billion lines, you might have better luck just brute forcing the old fashioned way…