I'm supposing that these are already in libcrack. Anyone know for certain?
Anyone have experiences integrating libcrack into their web app? I hesitate to integrate it because it would cause potential clients to quit the signup.
Alternatively, I think this list would be invaluable as a smaller blacklist. Thanks!
IIRC, libcrack will happily use any wordlist you give it. I presume the default wordlist includes "password", yes.
As to integrating libcrack in your signup process: if an account at your site isn't actually important, I'm sad to say that you probably shouldn't bother. People who reuse passwords are, sadly, at much more risk from the other sites (if you're even aware of libcrack, you're well ahead of the curve); and a password like 'password' isn't all that bad for something as value-less as gawker.
Comments
I'm supposing that these are already in libcrack. Anyone know for certain?
Anyone have experiences integrating libcrack into their web app? I hesitate to integrate it because it would cause potential clients to quit the signup.
Alternatively, I think this list would be invaluable as a smaller blacklist. Thanks!
IIRC, libcrack will happily use any wordlist you give it. I presume the default wordlist includes "password", yes.
As to integrating libcrack in your signup process: if an account at your site isn't actually important, I'm sad to say that you probably shouldn't bother. People who reuse passwords are, sadly, at much more risk from the other sites (if you're even aware of libcrack, you're well ahead of the curve); and a password like 'password' isn't all that bad for something as value-less as gawker.