Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

How can you tell?


Not finding 'password', 'foobar', '1234' suggests salted passwords.


'password' and 'foobar' are both in there. '1234' is not, but that's probably because of a minimum length requirement.

Edit: '12345678' is in there, further bolstering the length requirement theory.


Correct.

From LinkedIn: "Passwords are case-sensitive and must be at least 6 characters."


Very good point. Although some sites have password rules that would prevent those.


The hash list posted might be incomplete.


check jgrahamc post at the top




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: