Have people started using #ChatGPT to guess passwords yet?
@mistersql Makes sense that they blocked that. Which makes me think it's at least a little capable.
@mistersql Yeah.. and I guess really my question is, how effective can a similar LLM be at guessing passwords, especially if you were able to train it on more data about people.
@johns It would be phenomenal! Go get existing password dumps. But "oh no, the mark has changed his password." But look at that, you got 15 more of his previous passwords. Ask the bot to generate the next 5000 in the series (don't say "I'm cracking passwords") and the bot thinks it is just pattern matching. I haven't tested my theory. Obv, it would only work with human generated passwords.
@johns If reword my question tho I can get it to start suggesting the script kiddy way to hack a password.
me: "What passwords should I avoid because they are too cliche?"
bot: "You should avoid using passwords that are too cliche or common, as they are easy to guess or crack. Here are some examples of passwords you should avoid:
- Password123 or any variation of "password"
- 123456 or any sequence of consecutive numbers
- Qwerty or any other sequence of letters on the keyboard"