Passwords on Locodigital

Adobe Breach 2013: 153 Million Passwords and a Crypto Blunder

Sat, 03 Oct 2026 09:00:00 -0300

On October 3, 2013, Adobe published a short statement: attackers had broken into its network, copied nearly 3 million customer card records and taken source code for products such as ColdFusion. The number looked manageable. Weeks later, a file with more than 150 million username/password pairs surfaced on a forum, and the case became a textbook example of how not to protect passwords. Thirteen years on, the same mistake is still being made.

Aladdin (SNES): every stage password and the hidden level select

Sun, 13 Sep 2026 22:20:00 -0300

There is a confusion that has followed Aladdin around ever since: two completely different games share the name and shipped the same year. The Genesis one was made by Virgin, animated by Disney’s own animators, and its Aladdin carries a sword. The Super Nintendo one was made by Capcom, has the sharper acrobatic handling of the two, and its Aladdin has no sword — he bounces off enemies’ heads and throws apples.

Zombies Ate My Neighbors (SNES): passwords for every level

Sun, 13 Sep 2026 22:15:00 -0300

Zombies Ate My Neighbors has 55 levels. Fifty-five. Packed with vampires, werewolves, killer dolls, martians and a giant baby that walks through the screen demolishing everything in it. Finishing in one sitting is physically possible and humanly unlikely — which is why the password was part of the game, not a shortcut around it.

But there is a trap here that almost no list explains, and it causes 90% of the “this code doesn’t work” complaints.

Goof Troop (SNES): passwords for every stage of Capcom's co-op classic

Sun, 13 Sep 2026 22:10:00 -0300

If you played Goof Troop — the Goofy and Max game — you probably did not know you were playing the first project Shinji Mikami ever designed. The same Mikami who would create Resident Evil three years later and invent survival horror along the way.

That is not a loose piece of trivia. The elements are all there: an inventory limited to one item at a time, key-and-door puzzles, backtracking, resources that run out. Goof Troop is a 1993 Disney game with the skeleton of a survival horror underneath.

Mega Man X (SNES): the all-items password and how to get the Hadouken

Sun, 13 Sep 2026 22:05:00 -0300

The Mega Man X password system was a notebook all by itself. Twelve digits, in a grid, copied down in fear of swapping a 6 for an 8 — because getting one digit wrong did not give you “invalid password”. It gave you a strange half-state, with some weapons and no heart tanks.

Here is the code that unlocks everything, plus an explanation almost no list bothers with: why the Hadouken never shows up in a password.

Top Gear (SNES): every password for all 8 tracks and 3 difficulties

Sun, 13 Sep 2026 22:00:00 -0300

There is a sound anyone who rented cartridges on weekends recognises instantly: the synthesised engine of Top Gear climbing through the rev range while Barry Leitch’s soundtrack kicks in. And there was a ritual that came with it — writing down the password before returning the cartridge, because by Monday it belonged to somebody else.

The problem is that half the lists circulating online are wrong. Passwords swapped between difficulties, spaces omitted, and a “Normal” difficulty that does not exist in the game. This list was checked line by line.

What credential stuffing is and how leaked passwords open other accounts

Thu, 06 Aug 2026 09:00:00 -0300

You get an alert: access to your Netflix account detected in Bucharest, at 3 in the morning. You've never been to Romania. But the password was correct — so the system let it through. What happened wasn't a hacker guessing your password. It was a credential stuffing attack, and the blame most likely lies with a breach at some site you don't even remember signing up for.

What is credential stuffing?

Credential stuffing is a type of attack in which criminals take lists of username and password combinations obtained from old breaches and test them, automatically, against dozens of other services at the same time.

How to know if your email was leaked — and what to do next

Tue, 04 Aug 2026 09:00:00 -0300

In June 2026, a database containing 56 million unique email addresses harvested by infostealers — malware that captures credentials in real time — was indexed by the world's largest breach-tracking service. Those addresses, along with passwords, session tokens and cookies, are available for purchase on dark web channels right now. The question is simple and direct: is yours in there?

What Have I Been Pwned is

Have I Been Pwned (HIBP) is a free service created by Australian researcher Troy Hunt in December 2013. The platform aggregates databases from confirmed breaches — more than 1,000 compromised services indexed to date — and lets anyone check whether their data shows up on those lists.

Credential stuffing: what it is and how to protect your accounts

Fri, 03 Jul 2026 09:00:00 -0300

At 4am on 1 July 2025, an executive at a Brazilian fintech was woken by an urgent alert: a suspicious instant transfer of around US$3 million had just gone through. Over the following hours, at least six other Brazilian financial institutions logged the same coordinated pattern — legitimate customer credentials, harvested from earlier breaches, being used to break into real accounts. Brazil's central bank estimated the operation's potential losses could reach US$180 million. That is credential stuffing running at industrial scale.

How to use Bitwarden and stop reusing passwords (a practical guide)

Wed, 01 Jul 2026 09:00:00 -0300

You probably have dozens of online accounts. And if I ask how many genuinely different passwords you use? If the answer is "variations on the same thing", you're not alone — but you are running a concrete risk. When a site is compromised and the credentials end up in dumps, the first thing attackers do is test that data on other services. The attack has a name: credential stuffing. And it works precisely because most people reuse passwords.

Super Bomberman 3: every confirmed SNES password

Thu, 23 Apr 2026 16:00:00 -0300

There was a ritual in the 90s that nobody who lived through it ever forgets: grabbing a hardback notebook, opening it in the middle, and writing down that four-digit sequence that appeared on screen after you beat the boss. Sometimes the pen smudged. Sometimes you copied it down wrong. Sometimes a mate passed you a code that jumped you straight to World 4 — and that was worth its weight in gold.