I cross-referenced the leaked hashes against hashes of the 10,000 most common passwords and found that 93% of the passwords at least 6 characters long appear in the leak.
It's always surprising that people are so lackadaisical about their passwords. I've had people tell me their passwords in casual conversation multiple times, just for the sake of discussion.
Is craigslist officially okay with this kind of app? Prior attempts to automate, with varying degrees of aggregation/automation, have been shut down (see: http://www.wired.com/entertainment/theweb/magazine/17-09/ff_...). The "SMS coming soon for $3.99" seems like it would not fly.
I'm also working on a Chrome and Firefox extension which uses Craigslist as a data source, and this is my understanding as well
I think that rich client-side js apps packaged as browser extensions offer some interesting opportunities in general - being able to behave more like a normal client, instead of a giant aggregation host, allowing you to avoid angering services like Craigslist, being able to ask the user for permissions for increased localstorage limits (the default in most browsers is a measly 5mb) and the ability to do cross-domain ajax requests, etc.
http://www.johnvey.com/blog/2012/06/93-of-top-passwords-appe...
It's always surprising that people are so lackadaisical about their passwords. I've had people tell me their passwords in casual conversation multiple times, just for the sake of discussion.