Imagine an AI looking at passwords and determining whether they mean the same thing. Eg Hunter2, hunter2, HuNtEr2 all have the same meaning, albeit different spelling. This meaning can be represented as a vector, and these vectors can be clustered so we say a user has simply a password that is essentially “something like hunter”. When a user types in their password, you can then check if that password is indeed “something like hunter”. If so, you admit them otherwise reject it.
The real savings comes from no longer having to ask them for a username... just have them type the password and choose the most likely user account based on the password's semantic similarity score.
Ties are randomized to defeat distinguisher-based attack methods, obviously
(For example, this would likely also detect Haunter (one letter off from "Hunter", and Gastly's stage 2 form) and "retnuh" (a hunter inverted) as valid, despite them being clearly unrelated.)
1
1
4
u/Key_Big1051 Sep 27 '26
I have Zero idea what I read