search

easybill / easypwned

offline haveibeenpwned HIBP check and downloader, rest api, easybill
MIT License
25 stars 5 forks source link

Get password count for particular hash #2

Closed GSpecDrum closed 1 year ago

GSpecDrum commented 1 year ago

Hi!

Thanks for the docker image! It's great! :-)

Does it have or planned posibility to get password count for particular hash?

timglabisch commented 1 year ago

No, it's not on the roadmap. the problem is that it is simply not possible by using a bloom filter. Can you give me more background on what this is relevant to in your case? maybe there is another approach.

GSpecDrum commented 1 year ago

I'm afraid that there isn't. Because logic of our app relies on how much times password was pwned to show a message asking him to change it. It comes from business side.:-)

timglabisch commented 1 year ago

@GSpecDrum You could create a Bloom filter that omits all passwords that have not been pwned often enough. May this would work? but why do you use this threshold at all? pwned is pwned or?