03-24-2012, 03:49 AM
(03-24-2012, 12:03 AM)james123 Wrote: If I had the full list I would have uniqued it anyway because it does not accurately reflect if a rule is good or not.
Regardless, it would be interesting to see the non-unique list.
I've seen quite a big difference when creating Markov models for bruteforce depending on if I trained on an uniqued list vs a full list. Just as a thought experiment, if you could only make one password guess wouldn't it be better to make it '123456' vs. 'ZBNgASLo' even though they both show up in the phpbb list?
Even if it doesn't make a big difference, I doubt it would hurt to use the full list. Kind of like the old adage "Train like you fight", if you're actually going to be cracking full lists you might as well train on them ;p