Hacker News Reader

Comment by hennell | Hacker News Reader

They have a downloader for the hashed password list: https://github.com/HaveIBeenPwned/PwnedPasswordsDownloader

Why does this need to be an app? Why not just release the hashes?

The hashes are split into a million (2^20) files based on the first 20 bits (5 hex characters) of the hash. The downloader is just a convenient way to download them all.

The urls are https://api.pwnedpasswords.com/range/00000 to .../FFFFF, downloadable via any http client.

Thanks, TIL! Bet JDownloader can make quick work of that as well

You can just host it yourself: https://github.com/radekg/hibp.

Any ideas what the final size on disk would be after downloading?

It is 37 GB (I downloaded it yesterday).

Obligatory H2:

Can you see if my passwd is in there ***?*

Asking for a friend

Looks like hunter2 to me

Is it 37 GB with these new 1/3rd of previously unknown passwords hashes added?

So basically: did that DB grow from about 27 GB to 37 GB in the last few days?

It's a .NET application, so may be windows only. :/

.NET 6+ is cross platform.

Isn't that just specific parts, rather than the whole thing?

The core of the .NET runtime is cross-platform.

You do have the option to use platform-specific APIs or frameworks, which will make your app only work on that platform.

In the case of this app, it doesn't use anything platform-specific, so it could run on Windows, Linux and macOS.

Reply on news.ycombinator.com