skx/pam_pwnd
View on GitHub ↗ ★ 36 C archived
A PAM module to test passwords against previous leaks at haveibeenpwned.com
5 mentions on Hacker News by 4 people: 1 story, 4 comments · first 2018-10-07 · latest 2024-06-07
20082026
-
…but credibly feature complete) thing. (It uses the HTTP service, though, not a local dump.) [1] https://github.com/skx/pam_pwnd
comment by mananaysiempre · 2024-06-07 · in OpenSSH introduces options to penalize undesirable behavior -
…can design your defenses and moats well, you can secure your system with any method you want. [0]: https://github.com/skx/pam_pwnd [1]: http://www.linux-pam.org/Linux-PAM-html/sag-pam_cracklib.htm... [2]:…
comment by bayindirh · 2020-12-31 · in Linux Hardening Guide -
…password-based authentication on a server which is shared you might consider using my PAM module: https://github.com/skx/pam_pwnd It does lookups of previously-leaked passwords. Best practice these days is SSH-keys for authentication, but…
comment by stevekemp · 2019-01-17 · in The 773M Record “Collection #1” Data Breach -
…pam_pwnd to deny the use of passwords which have appeared in the have I been pwned database(s): https://github.com/skx/pam_pwnd/ That's not exactly the same thing as denying a previously-valid password, but it is along similar lines.
comment by stevekemp · 2018-10-07 · in Login_duress: A BSD authentication module for duress passwords