Seized Genesis Market data is now searchable in Have I Been Pwned | Hacker News Reader

Seized Genesis Market data is now searchable in Have I Been Pwned

troyhunt.com

105 points2bluesc19 comments

Looks like they changed how the data is downloaded. Now you need to use a software package that requires NET6. That is a no-go for me. So seems a Microsoft system is needed:

https://github.com/HaveIBeenPwned/PwnedPasswordsDownloader

Does anyone have a link or knows of a non-NET tool to download this new data ?

While I share your annoyance at needing dotnet on my system, since I don't use it, dotnet has been cross platform for quite some time. You don't need a Windows box to run this code.

I am on a system that does not support NET at all, so right now I am SOL :)

Are you on BSD?

Even BSD has a Linux compat layer right?

Yes.

Not OpenBSD :)

https://www.infoworld.com/article/3099038/openbsd-60-tighten...

Hah, I see. Yeah, that would do it.

Actually, you probably do since it has imports from Microsoft.Win32

Only for SafeFileHandle, which is actually portable and usable for random-access IO since .NET 6. The namespace is historical.

Looks like someone made a bash script: https://github.com/HaveIBeenPwned/PwnedPasswordsDownloader/i...

Just fire up a VM if you need Windows.

On what, I do not have a copy of any version of Windows. I think I can find Windows 3.1 diskettes somewhere in the cellar. :)

I have this download which I grabbed a while ago before the move to NET:

pwned-passwords-sha1-ordered-by-hash-v8.txt.gz

All I really want is a the list from Genesis.

That is irritating. I’m not even sure which is worse; having to install an enormous and bloated runtime in order to download a group of files over HTTP, or forcing me to make 64 thousand HTTP requests in order to download a single dataset.

It just makes a bunch of requests in the form https://api.pwnedpasswords.com/range/FFFFF and stores the replies in a file.

Well I ended up finding a Linux system with net6 on it. Was not that bad and the download was a rather interesting tool. I had a net issue and it seemed to know where to pick up (as long as you do not cancel the run).

So I have a the list :)

Now sending it over to BSD.

Thanks! Macroexpanded:

FBI seizes bot shop ‘Genesis Market’ amid arrests targeting operators, suppliers - https://news.ycombinator.com/item?id=35445867 - April 2023 (118 comments)

Somehow they think, user's fingerprint is stolen from the user machine, but you don't need that, fingerprint is accessible to any script you run in the internet, like amiunique.org

Reply on news.ycombinator.com