Steam was hacked

[antisocialmunky]

You know there are dictionaries with those replacements because replacement by something that looks the same is much more likely than replacement of 'o' with say 'Canadian.'

[Yazilliclick]

There can be dictionaries for any replacements, words, language, combination etc... but it's rather irrelevant for these types of attacks due to the size of the dictionary and the time it would take to run through it for an account.

Now if your account in particular was being targeted then sure it would be relevant. But chances are you and your account aren't that important. Instead they'll use a relatively small dictionary to process as many accounts as possible as quickly as possible rather than a large dictionary that would take forever and result in just marginally greater success.

It's all the more important that they use a fast one these days as most companies are quick to notice and react to these breaches by doing things like requiring password changes of users and notifying people. That means there's a short window where the account details are of any use at all.

[Gustaran]

It's all the more important that they use a fast one these days as most companies are quick to notice and react to these breaches by doing things like requiring password changes of users and notifying people. That means there's a short window where the account details are of any use at all.

Very good point!

[antisocialmunky]

Most people are uber lazy though

[spellman]

So, came across this nugget today from Hacker News.

http://me.veekun.com/blog/2011/12/04/fuck-passwords/

comment thread (actually enlightening instead of typical internet drivel): http://news.ycombinator.com/item?id=3313790