[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"article-password-reuse-is-the-real-risk":3,"related-password-reuse-is-the-real-risk":25},{"id":4,"slug":5,"title":6,"summary":7,"cover_image":8,"tags":9,"status":13,"source":14,"source_url":8,"source_name":8,"published_at":15,"created_at":16,"updated_at":17,"view_count":18,"content":19,"faq":20,"seo_title":8,"seo_description":8,"canonical_url":8,"noindex":24},"art_01KZRQKJ4XSSJ8T388699QF086","password-reuse-is-the-real-risk","真正的风险不是弱密码,是复用","把密码设复杂能挡住暴力破解,但挡不住复用带来的连锁失守。这两件事经常被混为一谈。",null,[10,11,12],"密码安全","撞库","弱密码","published","manual","2026-07-30T02:00:30.125049","2026-07-30T02:00:30.128649","2026-08-13T22:38:28.540987",4,"把密码设得又长又乱,能挡住暴力破解。但暴力破解从来不是普通人被盗号的主要原因。\n\n## 复用才是那条链\n\n攻击链条通常是这样的:某个小网站被拖库,你的邮箱和密码明文流出;攻击者拿这对凭据去撞你的邮箱、网盘、支付账号。只要有一处复用,整条数字身份就塌了。\n\n这叫撞库。它不需要任何漏洞,只需要你在两个地方用了同一个密码。\n\n## 为什么\"一个复杂密码用在所有地方\"不成立\n\n复杂度解决的是「猜不出来」,复用带来的问题是「已经不用猜了」。前者再强也补不了后者。\n\n## 按重要性排序去改\n\n不必一次改完上百个。顺序是:邮箱 > 有支付能力的账号 > 社交 > 其余。邮箱是所有账号的找回入口,它一旦失守,别的都是连带。",[21],{"q":22,"a":23},"复用和弱密码哪个更危险?","复用。弱密码需要攻击者去猜,复用意味着他已经有了正确答案,只是换个门试。",false,{"items":26},[27,37,50],{"id":28,"slug":29,"title":30,"summary":31,"cover_image":8,"tags":32,"status":13,"source":14,"source_url":8,"source_name":8,"published_at":33,"created_at":34,"updated_at":35,"view_count":36},"art_01KZRQKJ4S9170FB3P29A32W1C","worst-passwords-2026","2026 年最常用密码榜单:123456 又是第一","连续第 11 年,123456 稳坐榜首。这份榜单真正值得看的不是名次,而是它揭示的东西:人类的记忆力从来不是密码安全的可靠地基。",[10,12,11],"2026-07-29T15:52:40.735008","2026-07-29T15:52:40.724675","2026-08-13T17:42:37.407916",12,{"id":38,"slug":39,"title":40,"summary":41,"cover_image":8,"tags":42,"status":13,"source":14,"source_url":8,"source_name":8,"published_at":46,"created_at":47,"updated_at":48,"view_count":49},"art_01KZRQKJ4WF9DJTVJ29G70HY5M","how-to-choose-password-manager","密码管理器怎么选:三个问题就能筛掉大部分","市面上的密码管理器差别很大,但对比表往往列的是功能数量。真正决定安全性的是三个结构性问题,问完基本就能排除掉不合适的。",[43,44,45],"密码管理器","零知识","自托管","2026-07-29T15:52:40.764473","2026-07-29T15:52:40.757528","2026-08-11T15:41:28.293196",6,{"id":51,"slug":52,"title":53,"summary":54,"cover_image":8,"tags":55,"status":13,"source":14,"source_url":8,"source_name":8,"published_at":59,"created_at":60,"updated_at":61,"view_count":62},"art_01KZRQKJ4V4GSFPZ3VQGX80JQE","what-to-do-after-a-breach","又一起大规模数据泄露:这次该做什么、不该做什么","每次大规模泄露之后,网上都会冒出一堆建议。有些有用,有些纯属仪式感。这篇按优先级排一遍,并说清楚每一条为什么排在那个位置。",[56,57,58],"数据泄露","应急响应","二次验证","2026-07-29T15:52:40.750729","2026-07-29T15:52:40.742509","2026-08-14T12:56:21.829877",3]