News for hackers. Stuff that matters.

A comment on Microsoft Live Account Credentials Leaking from Windows 8 and Above. Parent comment

Re:Microsoft Live Account Credentials Leaking from Windows 8... by cm2187 on Tuesday August 02, 2016 @06:18AM (#12208877)
My uneducated understanding is that it is an MD5 hash, quite easily brute forceable if that's the case.

https://en.wikipedia.org/wiki/NT_LAN_Manager#NTLMv2

[ Parent | on HN ]
Re:Microsoft Live Account Credentials Leaking from Windows 8... by KMag on Tuesday August 02, 2016 @08:50AM (#12209527)
The NT Hash is actually an un-salted MD4 (not 5) hash of the UCS-2 encoded password. The authentication protocol uses the V2 Hash, which is an MD5-HMAC of the user name and domain, using the NT Hash as the key. The authentication protocol then uses the V2 Hash as an MD5-HMAC key for a pair of random nonces.
[ Parent | on HN ]