@simonwood Who decides what a commonly-used password is? Is the UK keeping an official list?
I understand that there are ways validate passwords against a list without necessarily sending the PW, but any system that finds a way to compare your passwords has some inherent vulnerabilities that could be catastrophic.
@LoneLocust 1Password literally has a feature that does this (it’s called Watchtower or some such - and not just common passwords, but it checks against leaked passwords).
But… 1Password has complete access to your passwords, sure. All of them. Fine. But the home router you mention - it can do the same thing with a list of 1, at least while the manufacturer is in business. Of course there’s a cost associated with that. But there’s also a cost associated with allowing unscrupulous manufacturers and hapless consumers to assemble giant botnets. (2/3)
Add comment