Do you use MS Edge? I found it's secrets
-
What do you think about the surnames.txt? My surname is not in the list so I guess I'm safe. :) Seriously, though, are last names used in some type of hack? Well, i guess everything is, but didn't know surnames had some kind of special thing associated with them.
I first learned of the list in VMS because a manager where I was working at the time (1990) wanted to set his password to "ORANGE". :sigh: At a later job, I extracted the four- and five-letter words, cleansed the result, and used them to form pairs to be used as passwords. A precedent had been set to make passwords such as HOUSE$BOAT, and I wanted to automate/randomize it. As a note to the newbs, passwords in OpenVMS (and other proper operating systems) are not case-sensitive because not all terminals support lower-case.
-
I first learned of the list in VMS because a manager where I was working at the time (1990) wanted to set his password to "ORANGE". :sigh: At a later job, I extracted the four- and five-letter words, cleansed the result, and used them to form pairs to be used as passwords. A precedent had been set to make passwords such as HOUSE$BOAT, and I wanted to automate/randomize it. As a note to the newbs, passwords in OpenVMS (and other proper operating systems) are not case-sensitive because not all terminals support lower-case.
Very interesting. Thanks for sharing.
PIEBALDconsult wrote:
As a note to the newbs, passwords in OpenVMS (and other proper operating systems) are not case-sensitive
Did not know. I'm a newb.
PIEBALDconsult wrote:
not all terminals support lower-case.
Sounds like an Apple ][ :-D
-
I wrote a program that watches the files which are created, updated, deleted, etc on your disk (Read about it here on CP[^]). Wow, that was gratuitous self-promotion and it didn't even feel like it. :laugh: Anyways, I had DiscoFiles running and I noticed that MS Edge directories were accessed. MS Edge Secrets I looked in this MS Edge directory and found its secrets... You can get to it on your system (If you are running Edge) at:
%localappdata%\Microsoft\Edge\User Data\ZxcvbnData\3.0.0.0
I mean I'm assuming that last directory will be named ZxcvbnData on yours too?? Copy-Paste to your FileExplorer and it'll get you there. You can see that there[^]. It's a list of files named:
english_wikipedia.txt
female_names.txt
male_names.txt
manifest.fingerprint
manifest.json
passwords.txt
surnames.txt
us_tv_and_film.txtWhat!?! Well, passwords is a lot of fun. Check it out. FYI - the passwords file is 30,000 lines long (30,000 common / bad passwords)
sunshine
iloveyou
f*ckme // my alteration to protect any kid sisters who are reading
ranger
hockey
computer
starwars
asshole
pepper
klaster
112233
zxcvbn // why are these letters so common?? !!
freedom
princess
maggie
pass
ginger
11111111
131313
f*ck // my alteration to protect any kid sisters who are reading
love
cheese
159753
summer
chelsea
dallas
biteme
matrix
yankees
6969
corvette
austinEdit Update Here are the contents of the manifest.json file:
{
"description": "zxcvbn data component",
"name": "zxcvbnData",
"version": "3.0.0.0"
}I think that pretty much explains it. :~ :rolleyes:
Do I use Microsoft Edge? No.
>64 Some days the dragon wins. Suck it up.
-
Do I use Microsoft Edge? No.
>64 Some days the dragon wins. Suck it up.
I actually use FireFox & Brave and I'm almost as completely agnostic to browsers these days. I discovered this when i was running on a work win10 VM which requires us to use MS Edge. I'm basically agnostic to OSes too, since I run Ubuntu 22.04 desktop to connect to work VMs (win10) and I KVM switch to my MacOS Mac Mini M1. :)
-
Do I use Microsoft Edge? No.
>64 Some days the dragon wins. Suck it up.
For some reason I have to, to view MS documentation on my desktop - the site doesn't work in Chrome (but it works fine on my Surface). Probably a config issue, but gawd knows where ...
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony "Common sense is so rare these days, it should be classified as a super power" - Random T-shirt AntiTwitter: @DalekDave is now a follower!
-
I actually use FireFox & Brave and I'm almost as completely agnostic to browsers these days. I discovered this when i was running on a work win10 VM which requires us to use MS Edge. I'm basically agnostic to OSes too, since I run Ubuntu 22.04 desktop to connect to work VMs (win10) and I KVM switch to my MacOS Mac Mini M1. :)
I think most of use whatever we got used to, I have used Brave (on my Debian system) and sometimes Vivaldi. I lied somewhat, I have to use Edge when I connect (VPN) to the client;s systems, that is what they have. Herself uses Safari on her MBP. Not aware that it is a browser, it is gmail.
>64 Some days the dragon wins. Suck it up.
-
Quote:
zxcvbn // why are these letters so common?? !!
Look at your keyboard ... Specifically the lowest row of letters ...
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony "Common sense is so rare these days, it should be classified as a super power" - Random T-shirt AntiTwitter: @DalekDave is now a follower!
I have this horrible feeling there's this whole dark and raging qwerty vs zxcvbn thing going on that I'm unaware of.
cheers Chris Maunder
-
I wrote a program that watches the files which are created, updated, deleted, etc on your disk (Read about it here on CP[^]). Wow, that was gratuitous self-promotion and it didn't even feel like it. :laugh: Anyways, I had DiscoFiles running and I noticed that MS Edge directories were accessed. MS Edge Secrets I looked in this MS Edge directory and found its secrets... You can get to it on your system (If you are running Edge) at:
%localappdata%\Microsoft\Edge\User Data\ZxcvbnData\3.0.0.0
I mean I'm assuming that last directory will be named ZxcvbnData on yours too?? Copy-Paste to your FileExplorer and it'll get you there. You can see that there[^]. It's a list of files named:
english_wikipedia.txt
female_names.txt
male_names.txt
manifest.fingerprint
manifest.json
passwords.txt
surnames.txt
us_tv_and_film.txtWhat!?! Well, passwords is a lot of fun. Check it out. FYI - the passwords file is 30,000 lines long (30,000 common / bad passwords)
sunshine
iloveyou
f*ckme // my alteration to protect any kid sisters who are reading
ranger
hockey
computer
starwars
asshole
pepper
klaster
112233
zxcvbn // why are these letters so common?? !!
freedom
princess
maggie
pass
ginger
11111111
131313
f*ck // my alteration to protect any kid sisters who are reading
love
cheese
159753
summer
chelsea
dallas
biteme
matrix
yankees
6969
corvette
austinEdit Update Here are the contents of the manifest.json file:
{
"description": "zxcvbn data component",
"name": "zxcvbnData",
"version": "3.0.0.0"
}I think that pretty much explains it. :~ :rolleyes:
I remember reading that 123456 is the most common password found in pwned databases. So I suspect that passwords.txt is the top 30,000 in order at the time it was created!
-
Quote:
zxcvbn // why are these letters so common?? !!
Look at your keyboard ... Specifically the lowest row of letters ...
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony "Common sense is so rare these days, it should be classified as a super power" - Random T-shirt AntiTwitter: @DalekDave is now a follower!
Waiting for some angry ANSI X4.22-1983[^] fan to point out that their bottom row reads
zqjkxbmwv. :-D
"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer
"These people looked deep within my soul and assigned me a number based on the order in which I joined" - Homer
-
Waiting for some angry ANSI X4.22-1983[^] fan to point out that their bottom row reads
zqjkxbmwv. :-D
"These people looked deep within my soul and assigned me a number based on the order in which I joined." - Homer
Are there any left? I though that war was over ... :sigh:
"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony "Common sense is so rare these days, it should be classified as a super power" - Random T-shirt AntiTwitter: @DalekDave is now a follower!
-
I'm not very impressed with
male_names.txt- it's not even close to complete.OriginalGriffisn't even in there!"I have no idea what I did, but I'm taking full credit for it." - ThisOldTony "Common sense is so rare these days, it should be classified as a super power" - Random T-shirt AntiTwitter: @DalekDave is now a follower!
Yep, over 3700 female names but less than 1000 male. My (middle-eastern, but pretty common) next-door neighbour's isn't in there, nor the leaders of two countries commonly in the news at the moment, nor the designer of the Eiffel tower, nor even a recent US president. And as for surnames: neither part of my double-barrelled name is there, nor my wife's maiden name, nor my daughter-in-law's maiden name, nor that same ex-president. Someone at MS isn't trying very hard. But at least the film texts includes both aaaaaaaaah and that other classic, aaaaaaaaaa (and they spelt it correctly!)
Telegraph marker posts ... nothing to do with IT Phasmid email discussion group ... also nothing to do with IT Beekeeping and honey site ... still nothing to do with IT
-
I wrote a program that watches the files which are created, updated, deleted, etc on your disk (Read about it here on CP[^]). Wow, that was gratuitous self-promotion and it didn't even feel like it. :laugh: Anyways, I had DiscoFiles running and I noticed that MS Edge directories were accessed. MS Edge Secrets I looked in this MS Edge directory and found its secrets... You can get to it on your system (If you are running Edge) at:
%localappdata%\Microsoft\Edge\User Data\ZxcvbnData\3.0.0.0
I mean I'm assuming that last directory will be named ZxcvbnData on yours too?? Copy-Paste to your FileExplorer and it'll get you there. You can see that there[^]. It's a list of files named:
english_wikipedia.txt
female_names.txt
male_names.txt
manifest.fingerprint
manifest.json
passwords.txt
surnames.txt
us_tv_and_film.txtWhat!?! Well, passwords is a lot of fun. Check it out. FYI - the passwords file is 30,000 lines long (30,000 common / bad passwords)
sunshine
iloveyou
f*ckme // my alteration to protect any kid sisters who are reading
ranger
hockey
computer
starwars
asshole
pepper
klaster
112233
zxcvbn // why are these letters so common?? !!
freedom
princess
maggie
pass
ginger
11111111
131313
f*ck // my alteration to protect any kid sisters who are reading
love
cheese
159753
summer
chelsea
dallas
biteme
matrix
yankees
6969
corvette
austinEdit Update Here are the contents of the manifest.json file:
{
"description": "zxcvbn data component",
"name": "zxcvbnData",
"version": "3.0.0.0"
}I think that pretty much explains it. :~ :rolleyes:
-
I wrote a program that watches the files which are created, updated, deleted, etc on your disk (Read about it here on CP[^]). Wow, that was gratuitous self-promotion and it didn't even feel like it. :laugh: Anyways, I had DiscoFiles running and I noticed that MS Edge directories were accessed. MS Edge Secrets I looked in this MS Edge directory and found its secrets... You can get to it on your system (If you are running Edge) at:
%localappdata%\Microsoft\Edge\User Data\ZxcvbnData\3.0.0.0
I mean I'm assuming that last directory will be named ZxcvbnData on yours too?? Copy-Paste to your FileExplorer and it'll get you there. You can see that there[^]. It's a list of files named:
english_wikipedia.txt
female_names.txt
male_names.txt
manifest.fingerprint
manifest.json
passwords.txt
surnames.txt
us_tv_and_film.txtWhat!?! Well, passwords is a lot of fun. Check it out. FYI - the passwords file is 30,000 lines long (30,000 common / bad passwords)
sunshine
iloveyou
f*ckme // my alteration to protect any kid sisters who are reading
ranger
hockey
computer
starwars
asshole
pepper
klaster
112233
zxcvbn // why are these letters so common?? !!
freedom
princess
maggie
pass
ginger
11111111
131313
f*ck // my alteration to protect any kid sisters who are reading
love
cheese
159753
summer
chelsea
dallas
biteme
matrix
yankees
6969
corvette
austinEdit Update Here are the contents of the manifest.json file:
{
"description": "zxcvbn data component",
"name": "zxcvbnData",
"version": "3.0.0.0"
}I think that pretty much explains it. :~ :rolleyes:
What is scary is that these are plain text files. Not even a simple attempt to obfuscate them. If my PC is confiscated and the Police search it for naughty words, they will find them in that directory. What is a relief is that none of my passwords are in the list. Sadly, I'm more common than I thought. Both my forenames are in the top 100 male names and my surname just misses out of its top 100 list. How soon will it be before these name lists are used as the dictionaries for a bad version of Wordle?
-
Very interesting. Thanks for sharing.
PIEBALDconsult wrote:
As a note to the newbs, passwords in OpenVMS (and other proper operating systems) are not case-sensitive
Did not know. I'm a newb.
PIEBALDconsult wrote:
not all terminals support lower-case.
Sounds like an Apple ][ :-D
I seem to recall using some Hazeltine terminals that didn’t have lowercase back in the early 80’s in college.
-
OriginalGriff wrote:
Look at your keyboard ... Specifically the lowest row of letters ...
I am lame for not noticing. I'm a touch-typist too. Should'a known. <forehad slap> :rolleyes:
Actually, being a touch-typist means you're LESS likely to notice. I type moderately fast (60-80 wpm), but if you ask me where a given key is located, I have to think about it. I've been typing long enough that my fingers do what is necessary without conscious thought.
-
Actually, being a touch-typist means you're LESS likely to notice. I type moderately fast (60-80 wpm), but if you ask me where a given key is located, I have to think about it. I've been typing long enough that my fingers do what is necessary without conscious thought.
BryanFazekas wrote:
being a touch-typist means you're LESS likely to notice.
Yeah, I think you are right about that. I've been touch-typing for over 30 years (learned by playing WizType (Wizard of Id) on a Commodore 128). Amazing, you can actually play the game on Archive.org right in your browser.[^] I just tried it. :) Anyways, you are right. I just type, I don't know where the keys are. :laugh:
-
I wrote a program that watches the files which are created, updated, deleted, etc on your disk (Read about it here on CP[^]). Wow, that was gratuitous self-promotion and it didn't even feel like it. :laugh: Anyways, I had DiscoFiles running and I noticed that MS Edge directories were accessed. MS Edge Secrets I looked in this MS Edge directory and found its secrets... You can get to it on your system (If you are running Edge) at:
%localappdata%\Microsoft\Edge\User Data\ZxcvbnData\3.0.0.0
I mean I'm assuming that last directory will be named ZxcvbnData on yours too?? Copy-Paste to your FileExplorer and it'll get you there. You can see that there[^]. It's a list of files named:
english_wikipedia.txt
female_names.txt
male_names.txt
manifest.fingerprint
manifest.json
passwords.txt
surnames.txt
us_tv_and_film.txtWhat!?! Well, passwords is a lot of fun. Check it out. FYI - the passwords file is 30,000 lines long (30,000 common / bad passwords)
sunshine
iloveyou
f*ckme // my alteration to protect any kid sisters who are reading
ranger
hockey
computer
starwars
asshole
pepper
klaster
112233
zxcvbn // why are these letters so common?? !!
freedom
princess
maggie
pass
ginger
11111111
131313
f*ck // my alteration to protect any kid sisters who are reading
love
cheese
159753
summer
chelsea
dallas
biteme
matrix
yankees
6969
corvette
austinEdit Update Here are the contents of the manifest.json file:
{
"description": "zxcvbn data component",
"name": "zxcvbnData",
"version": "3.0.0.0"
}I think that pretty much explains it. :~ :rolleyes:
Its from this [GitHub - dropbox/zxcvbn: Low-Budget Password Strength Estimation](https://github.com/dropbox/zxcvbn) Apparently Edge (or MS in general) uses it
-
Its from this [GitHub - dropbox/zxcvbn: Low-Budget Password Strength Estimation](https://github.com/dropbox/zxcvbn) Apparently Edge (or MS in general) uses it
-
Yep, over 3700 female names but less than 1000 male. My (middle-eastern, but pretty common) next-door neighbour's isn't in there, nor the leaders of two countries commonly in the news at the moment, nor the designer of the Eiffel tower, nor even a recent US president. And as for surnames: neither part of my double-barrelled name is there, nor my wife's maiden name, nor my daughter-in-law's maiden name, nor that same ex-president. Someone at MS isn't trying very hard. But at least the film texts includes both aaaaaaaaah and that other classic, aaaaaaaaaa (and they spelt it correctly!)
Telegraph marker posts ... nothing to do with IT Phasmid email discussion group ... also nothing to do with IT Beekeeping and honey site ... still nothing to do with IT
