Hector Martin

And based on the 99.2% of Hunt's hashes I've cracked so far, if you simply require 12 characters minimun, 80% of his list is unnecessary.

And if you are hashing your users' passwords with high-cost bcrypt or scrypt, a smaller blacklist provides good cross-coverage

Do you think people could estimate a blacklist size based on a specific hash speed, or more broad guidelines than that?

That is a super interesting idea, and I bet quite possible! A calculator would need to let the user select their threat model variables.

I feel the need to mention this paper by @CormacHerley about password blacklists and bloom filters: https://www.microsoft.com/en-us/research/wp-content/uploads/2016/02/popularityISeverything.pdf …

And I like to add it's follow up work https://www.usenix.org/system/files/conference/soups2017/soups2017-segreti.pdf …

At least I'm reinventing better and better wheels. I must be on to something! ;)

I simply love these Twitter discussions that ends up with @PwdRsch, @lakiw, @m33x & @CormacHerley being right, with a link to prove it. :D