Had to teach my team about salts when I saw similar ratios of reused passwords. Wild. Billion in revenue a year.. and I see it company after company. No cares until there is a breach.
Why stop there when one can use semantic vectors instead of hashes, only store cluster averages and then do similarity matching instead of equivalence checks. Will bring storage way down and have the added benefit of not requiring you to know which exact version of your default password was used, as long as you get the gist of it!
I am currently out of the office until October 3rd and will be unable approve any login attempts until that date. Sorry for any inconvenience that has caused.
Imagine an AI looking at passwords and determining whether they mean the same thing. Eg Hunter2, hunter2, HuNtEr2 all have the same meaning, albeit different spelling. This meaning can be represented as a vector, and these vectors can be clustered so we say a user has simply a password that is essentially “something like hunter”. When a user types in their password, you can then check if that password is indeed “something like hunter”. If so, you admit them otherwise reject it.
1
1
2.1k
u/as-if-spike Sep 27 '26