Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Perhaps the best password I've found in this list is \0/

In the original SQL dump it also seems that some accounts don't have a password. I'm not sure how this is possible. For example:

    334860:cashcratereferer@live.com:
vs. a normal entry

    334868:ktomlinson7@yahoo.com:password


This would support the idea that they were phished rather than straight from the database. The phishing site may have just dumped all the submitted form values to a file, regardless of whether a password was entered or not.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: