{"id":2237,"date":"2012-01-22T10:58:31","date_gmt":"2012-01-22T15:58:31","guid":{"rendered":"http:\/\/www.bytebot.net\/blog\/?p=2237"},"modified":"2012-01-22T10:58:34","modified_gmt":"2012-01-22T15:58:34","slug":"popular-malaysian-passwords-sample-size75000","status":"publish","type":"post","link":"http:\/\/www.bytebot.net\/blog\/archives\/2012\/01\/22\/popular-malaysian-passwords-sample-size75000","title":{"rendered":"Popular Malaysian passwords (sample size=75,000)"},"content":{"rendered":"

I just read that about 100,000 most likely Malaysian Facebook accounts have been cracked<\/a>. Well their passwords are available for all to see in pastebin. Upon checking, I only saw a little over 75,000 since the third file has been compromised. From that sample, I quickly derived that the most popular Malaysian passwords are:<\/p>\n

    \n
  1. 123456<\/li>\n
  2. sayang<\/li>\n
  3. brokenheart<\/li>\n
  4. 123456789<\/li>\n
  5. rozaliqa75<\/li>\n
  6. effaluve<\/li>\n
  7. akucintaallah<\/li>\n
  8. zzz999<\/li>\n
  9. pradeebkumar123$%<\/li>\n
  10. 12345678<\/li>\n<\/ol>\n

    The least popular ones in that sample set include having spaces, hashes, brackets, and more. So there are some secure ones!<\/p>\n

    Using one’s phone number seems to also be popular. Sometimes appending or pre-pending a string (like a name) to it. Using birthdays seems to also be quite common, sometimes also appending or pre-pending a string like a name to it.<\/p>\n

    And for those wanting to “further analyse” the dataset yourself, I just quickly used standard Unix tools, and you can do it too.<\/p>\n

    grep \"Password:\" part_* | awk -F\":\" '{print $3}'| sort | uniq -c |sort -n\n<\/pre>\n
    Pipe to less<\/tt>, use head<\/tt>\/tail<\/tt>, etc.<\/p>\n
    Share this:<\/h3>