Remove my password from lists so hackers won't be able to hack me #155

assafnativ · 2017-12-21T11:47:03Z

No description provided.

mitcom · 2017-12-21T12:10:39Z

Passwords/10_million_password_list_top_1000.txt

@@ -344,7 +344,6 @@ blue
 liverpool
 theman
 bandit
-dolphins


@assafnativ please remember to update the filename. 10_million_password_list_top_1000.txt is not accurate right now, actually there are only 999 passwords

I think it should be renamed to 10_million_password_list_top_1000_except_dolphins.txt

Привет от дев нулла)0

Also any sites tested against the revised list should include some kind of logo to confirm that Dolphin is now allowed as a safe password. Might I suggest: http://savedolphins.eii.org/files/dsf/Dolphin_Safe.png

@liuzhiyuan1993 哦哦，谢谢ଲଇଉକ

There is a idiom in China, "此地無銀三百兩", which means telling your secret yourself.
For security, you had better close the issue and fully delete it if possible.

To add on to the translation of the idiom, that phrase literally means writing a sign that says "I did NOT bury 300 grand in this spot"

@JohnLBevan

Might I suggest: http://savedolphins.eii.org/files/dsf/Dolphin_Safe.png

I thinks they can safely merge it. The issue is the dolphin-proof now. 😄

The dolphins have communicated to us members of the Fourth International Posadist that they sign off on this request, as exposing them before their plan reaches completion could jeopardize the workers of the world. 🐋

mikield · 2017-12-21T12:14:38Z

This is a security hole. This pull request should be accepted as soon as possible.

rooterkyberian · 2017-12-21T12:21:39Z

I'm also affected by this, please merge ASAP

mitcom · 2017-12-21T12:29:12Z

@assafnativ @rooterkyberian could you provide any testing data like service addresses and logins so we could check and test to estimate the real impact of this change?

ksx4system · 2017-12-21T12:33:42Z

ROTFLMAO!

Wingless-Archangel · 2017-12-21T12:48:53Z

What the.....i don’t think this will solve the issue

…

On Thu, 21 Dec 2017 at 19:33, Krzysztof Staniorowski < ***@***.***> wrote: ROTFLMAO! — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#155 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ADo_cTu0FfmnSQSxs34YcAbHMKk11h4vks5tClAygaJpZM4RJt0h> .

Fake51 · 2017-12-21T12:55:19Z

@mitcom you mean, like the publicly available email address and blog address on his github page?

WielkiZielonyMelon · 2017-12-21T13:13:29Z

@assafnativ They see me trollin, they hatin...

denzuko · 2017-12-21T13:24:57Z

I think it goes with out saying:

quantuminformation · 2017-12-21T13:53:46Z

4 random words are really easier than the gibberish?

dmytrokyrychuk

Looks good 👍

FernandoMiguel · 2017-12-21T14:37:51Z

@KyrychukD wtf

wifiuk · 2017-12-21T14:47:37Z

Can you please add my password
dolphins

To this list so I can test it against insecure services..

mitcom · 2017-12-21T14:57:27Z

If anybody here is affected too I can suggest temporally change the password to one from https://mostsecure.pw/

wifiuk · 2017-12-21T15:04:10Z

Is dolphin1 on the list. ;) That's secure as it has a 1

atastycookie · 2017-12-21T15:05:55Z

Dolphin1!

wifiuk · 2017-12-21T15:07:57Z

Ah good idea, hackers will never try that..

chipironcin · 2017-12-21T15:22:33Z

Same here.
Steps to reproduce:

Go to https://accounts.google.com/ServiceLogin
Username: chipironcin@gmail.com Password: dolphins
????
Profit

dsuurlant · 2017-12-21T15:23:41Z

Is my password hunter2 safe

apetresc · 2017-12-21T15:26:30Z

@dsuurlant I just see *******

Kumar-Kishan · 2017-12-21T15:39:24Z

is my password thisissparta safe????????

espadrine · 2017-12-21T15:42:23Z

is my password thisissparta safe????????

Absolutely, if changed!

miguemely · 2017-12-21T15:43:47Z

This is gold.

…

Sent from my iPhone

On Dec 21, 2017, at 10:39 AM, Kishan Kumar ***@***.***> wrote: is my password thisissparta safe???????? — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.

JayKey · 2017-12-21T15:44:47Z

Change it to dolphins, dolphins is safe now 21.12.2017 16:42 "Thaddée Tyl" <notifications@github.com> napisał(a):

…

is my password thisissparta safe???????? Absolutely, if changed! — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#155 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ACgiM34NXJyW-4C4DTitmf0OrwdXCd9Mks5tCnxqgaJpZM4RJt0h> .

equero · 2017-12-21T15:45:02Z

nice, my 122112 password still alive...

rbnpercy · 2017-12-21T15:46:26Z

At least I know Alligator1 will never be guessed.

nebril

Can confirm, is safe.

0xmohit · 2017-12-21T15:57:16Z

@assafnativ, you had the same password as mine?

mitcom · 2017-12-21T16:00:00Z

@assafnativ, you had the same password as mine?

@0xmohit not anymore, I've just change yours

ColdGrub1384 · 2018-02-26T17:20:01Z

Hahahhahaha pure genius

nzec · 2018-02-26T17:40:12Z

If there are so many approvals, why isn't this merged yet?

jens1o · 2018-02-26T19:08:06Z

I hoped that this pull request would die at some point, but there's still something going on(even after two(!) months)...

elijahcruz12 · 2018-02-27T13:45:15Z

@jens1o of course it is, it was unexpected and pretty funny. Even with all these approved, there is of course no merge, even though @assafnativ probably wants a merge.

0E800 · 2018-02-27T19:32:58Z

Thread muted. (didn't know it was an option till now)
Give it a rest.

domino14 · 2018-02-27T21:56:13Z

is annoyed about all the comment spam
generates another piece of spam complaining about the spam

Ekultek · 2018-02-27T22:14:23Z

Spam

…

On Feb 27, 2018, at 3:56 PM, César Del Solar ***@***.***> wrote: is annoyed about all the comment spam generates another piece of spam complaining about the spam — You are receiving this because you commented. Reply to this email directly, view it on GitHub, or mute the thread.

SharpOB · 2018-02-27T22:17:48Z

S P A M
P
A
M

shtukas · 2018-02-28T08:54:03Z

Jezz ! For technologists we are not very good at this internet thing, are we ?

The correct way to use a thread like this, is to participate to it and then mute it.

This let the early participants, who eventually get tired of subsequent updates, not to be spammed [1], while allowing the genuine new people discovering this to be a part of it and to experience it with the same amusement as we all, old timers, did.

Easy.

[1] I personally don't feel that, I will never mute this as I love it! And as far as my inbox is concerned I discovered my email client's delete button a long time ago, but I understand that's not the case of everybody.

elijahcruz12 · 2018-02-28T14:06:58Z

I've been watching this since the first week and commenting on it since, I didn't mute it because it is still a great issue. If you really care that much, you can just read this to get rid of the notifications since you clearly do not know how to.

danielmiessler · 2018-03-04T20:37:44Z

👍 Although removal of this password would make you, and many marine biologists, more secure, we're going to have to decline at this time.

: )

Best thread ever.

nzec · 2018-03-05T04:19:43Z

It finally died!

Good Job everyone!

assafnativ · 2018-03-05T09:17:33Z

That was fun :)

jonschlinkert · 2018-03-09T18:13:48Z

My password is *****************, why does it keep showing up in every single application I use?

* Performance: read the response dump line by line instead of loading the whole thing in memory The response from the service will grow over time. There is no way to get passwords [unpwned](danielmiessler/SecLists#155), so we can safely assume the list will keep growing, adding more an more new hashes. One day it will grow large enough to start taking down servers, when users "DDoS" applications with known "big" pwned password hash prefixes. This PR switches from "load everything to memory and find our hash" to "fetch data in chunks, and process line by line". * Remove regular expressions usage in favour of start_with? In Ruby `start_with?` is heavily optimized compared to regular expressions (more than 2 times faster). This PR replaces regular expressions with `start_with?` ``` 13.103359 0.734251 13.837610 ( 14.620959) 13.238428 0.742140 13.980568 ( 14.506166) 12.836573 0.729563 13.566136 ( 14.191792) 12.408245 0.642944 13.051189 ( 13.333299) ```

fgRuslan · 2018-03-29T14:37:02Z

Do you know how does Git work?

voidnull000 · 2018-04-08T21:50:10Z

Oh man, this was just hilarious to scroll through. Especially since I was scrolling FAST.

Meanwhile...

EDIT: But still, what if someone uses their ******** in the middle of a sentence?

jamesjenner · 2018-09-05T05:44:03Z

So long and thank's for all the fish.

jens1o · 2018-09-05T07:30:13Z

stop making new notifications, this page takes ages to load lol

tdrama · 2018-09-05T07:53:16Z

Thanks friend ... I will be glad to know you too well Mr.. Please can you contact Me on what's app or any other social platform.. Am a noob .. And I will be merry to gain from you...

…

On Wed, Sep 5, 2018, 08:30 Jens Hausdorf ***@***.***> wrote: stop making new notifications, this pages takes ages to load lol — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#155 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AhMBZWnRolxVID49T8yy6eDlC2ZEe4ijks5uX32zgaJpZM4RJt0h> .

tdrama · 2018-09-05T07:53:29Z

Thanks for notify me also

…

On Wed, Sep 5, 2018, 08:30 Jens Hausdorf ***@***.***> wrote: stop making new notifications, this pages takes ages to load lol — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#155 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AhMBZWnRolxVID49T8yy6eDlC2ZEe4ijks5uX32zgaJpZM4RJt0h> .

Flowy · 2018-09-05T10:11:36Z

Thank you, I almost forgot about this.

domino14 · 2018-09-05T12:38:16Z

pls bobs

…

On Wed, Sep 5, 2018 at 6:12 AM Flowy ***@***.***> wrote: Thank you, I almost forgot about this. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#155 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAjuZuz6PpkXqS-dmKObe_I-vNB7to1gks5uX6OUgaJpZM4RJt0h> .

Htarlov · 2018-09-05T13:07:01Z

I heard about magic button called "unsubscribe".
You click that and kaboom, no more notifications.
But maybe it's just some old rumor.

Remove my password from lists so hackers won't be able to hack me

3cb9418

mitcom reviewed Dec 21, 2017

View reviewed changes

dmytrokyrychuk approved these changes Dec 21, 2017

View reviewed changes

nebril approved these changes Dec 21, 2017

View reviewed changes

PatrickJS approved these changes Feb 26, 2018

View reviewed changes

Ekultek approved these changes Feb 26, 2018

View reviewed changes

danielmiessler closed this Mar 4, 2018

kpumuk mentioned this pull request Mar 7, 2018

Performance: read the response dump line by line instead of loading the whole thing in memory philnash/pwned#5

Merged

g0tmi1k mentioned this pull request Apr 16, 2018

Remove my password from the list not to let hackers hack me #191

Closed

Repository owner locked as resolved and limited conversation to collaborators Sep 5, 2018

Remove my password from lists so hackers won't be able to hack me #155

Remove my password from lists so hackers won't be able to hack me #155

Conversation

assafnativ commented Dec 21, 2017

mitcom Dec 21, 2017 • edited Loading

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

Choose a reason for hiding this comment

mikield commented Dec 21, 2017

rooterkyberian commented Dec 21, 2017

mitcom commented Dec 21, 2017

ksx4system commented Dec 21, 2017

Wingless-Archangel commented Dec 21, 2017 via email

Fake51 commented Dec 21, 2017

WielkiZielonyMelon commented Dec 21, 2017

denzuko commented Dec 21, 2017

quantuminformation commented Dec 21, 2017

dmytrokyrychuk left a comment

Choose a reason for hiding this comment

FernandoMiguel commented Dec 21, 2017

wifiuk commented Dec 21, 2017

mitcom commented Dec 21, 2017

wifiuk commented Dec 21, 2017

atastycookie commented Dec 21, 2017

wifiuk commented Dec 21, 2017

chipironcin commented Dec 21, 2017

dsuurlant commented Dec 21, 2017

apetresc commented Dec 21, 2017

Kumar-Kishan commented Dec 21, 2017

espadrine commented Dec 21, 2017

miguemely commented Dec 21, 2017 via email

JayKey commented Dec 21, 2017 via email

equero commented Dec 21, 2017

rbnpercy commented Dec 21, 2017

nebril left a comment

Choose a reason for hiding this comment

0xmohit commented Dec 21, 2017

mitcom commented Dec 21, 2017

ColdGrub1384 commented Feb 26, 2018

nzec commented Feb 26, 2018

jens1o commented Feb 26, 2018 • edited Loading

elijahcruz12 commented Feb 27, 2018

0E800 commented Feb 27, 2018

domino14 commented Feb 27, 2018

Ekultek commented Feb 27, 2018 via email

SharpOB commented Feb 27, 2018

shtukas commented Feb 28, 2018

elijahcruz12 commented Feb 28, 2018 • edited Loading

danielmiessler commented Mar 4, 2018

nzec commented Mar 5, 2018

assafnativ commented Mar 5, 2018

jonschlinkert commented Mar 9, 2018

fgRuslan commented Mar 29, 2018

voidnull000 commented Apr 8, 2018 • edited Loading

jamesjenner commented Sep 5, 2018

jens1o commented Sep 5, 2018 • edited Loading

tdrama commented Sep 5, 2018 via email

tdrama commented Sep 5, 2018 via email

Flowy commented Sep 5, 2018

domino14 commented Sep 5, 2018 via email

Htarlov commented Sep 5, 2018

mitcom Dec 21, 2017 •

edited

Loading

jens1o commented Feb 26, 2018 •

edited

Loading

elijahcruz12 commented Feb 28, 2018 •

edited

Loading

voidnull000 commented Apr 8, 2018 •

edited

Loading

jens1o commented Sep 5, 2018 •

edited

Loading