Collaborative effort to analyze the Adobe passwords dump | Hacker News Reader

Collaborative effort to analyze the Adobe passwords dump

passwords.io

17 pointsco_pl_te17 comments

Some of them are pretty funny (note, this is from http://lucb1e.com/credgrep/)

    Your search has been succesfully performed. The result:
    Userid: 100206240
    Email: jamie@whitehouse.gov
    Encrypted password: 2oeMbO/Paps=
    Password hint: who is the dumbest president ever

Some password hints with that same encrypted password:

  idiot
  hero
  worst president
  My President
  prez
  gwbush is the pw

I think I can guess what the password is ;)

I can think of very few positive effects of this - what's the purpose? Anyone care to elaborate on how this is beneficial?

Has anyone actually heard from Adobe about this? They haven't sent me an email (yet), but http://adobe.cynic.al/ claims my credentials were leaked.

You may have gotten a false positive (as the bottom of that page explains). Try http://lucb1e.com/credgrep/ instead.

My email comes up in both (that one returns the correct hint and an encrypted password.)

I haven't been sent an email or letter from Adobe yet, but I did have to reset my password upon trying to log in.

I've read about many people having the cards they used revoked by their credit card provider, but mine hasn't been. There's also been no fraud on the account so far that I've seen.

Yeah, not a false positive: "Looking at the length of the encrypted password, your password is between 8 and 15 characters long." (it's actually 20 characters -- maybe Adobe does password truncation?)

I have not received any email communications from adobe on this matter. That said, I did receive a letter in the mail and was forced to change my password upon logging in to adobe.

Yes, I received an email from Adobe shortly after the news of the leak became public.

Looks like this was posted a little too early.

It's a good idea, but I think that the reaction to "submit your password" is going to be negative.

I consider mine a "burned" password and would happily submit it to help with key recovery.

Ditto. I don't doubt plenty of people will skip that option, but I'm happy to submit mine.

Why is key recovery desirable?

Everybody gets even more fucked. Haha, lol.

I like the idea, but isn't this illegal?

Umh, is everything "Coming soon"?

EDIT: also the About and Contact links are mock.

Hey guys let's all be co-conspirators in a planning and engaging in felonious activity on a public website.

Reply on news.ycombinator.com