Comments (6)
Hello!
Yes, i did capture username/email tuples in my data.
It is a great idea, however it is extremely time consuming to do a large-scale analysis on both username and password, because it requires doing a join operation on 1 billion rows.
But it is not as impactful as you might think.
- Average number of times each email was found is 1.889.
- 196.250.369 emails were only found once.
- A few email addresses are responsible of raising the average.
[email protected]
was the most common email address, found 90549 times, along with[email protected]
(85k times),[email protected]
(38k times),[email protected]
(31k times) and so on.
So, i've decided not to process that metric, because it will be too computationally heavy with minimal impact.
If you disagree, please feel free to write so!
Cheers!
from pwdb-public.
Interesting. For the emails used many thousands of times, I wonder if those should be blacklisted (along with any accounts created using those as secondary accounts) - probably fraud related.
What if you limited it to say accounts which appeared within a smaller range of occurrences - say 10 to 500 times? This could substantially reduce the computational cost and would seem to still provide important information about reuse of passwords
Thanks for doing the important work you do!
from pwdb-public.
I've filtered accounts which have appeared more than once in a dump (just because i dont think a regular user can register with the same email more than once to a website).
If there were 25 (username,password) tuples with same username and password in a single dump, they were only counted as 1.
This had 2 possible outcomes - Either accounts repeating 90k times also shared the password and did not get processed 90k times, or they had random password, and did not influence the most common passwords list.
Interesting point though, these spam accounts appear in all kinds of lists, and they have very natural looking passwords, so i don't think these accounts skewed the statistics other than most common passwords either.
from pwdb-public.
Hmmmmmmmmmmm interesting breakthrough, i checked some of the more unique-looking passwords used by the mail.ru@hotmail account.
I'm pretty certain people trying to sell these leaks bloated the number of credentials inside, by duplicating accounts and replacing their usernames with these junks.
from pwdb-public.
I've been checking passwords from mystery lists frantically, i was really excited there was something to possibly explain that, but it looks like just a fraction of these passwords are from these spam accounts.
from pwdb-public.
i need the commands for this how do i search for passwords
from pwdb-public.
Related Issues (10)
- Which methods & tools used? HOT 10
- Any Trends with respect to the type of Dump
- Most common pattern masks HOT 2
- -bug veya sorun degildir- HOT 1
- Occurrence ratios HOT 2
- License HOT 1
- Spanish 150 word list and a suggestion HOT 6
- top 'leak fingerprint' words (frequent unique passwords per leak) HOT 1
- The mystery list HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pwdb-public.