Yahoo discloses hack of 1B accounts

Re:Yahoo discloses hack of 1B accounts by leereeves on Wednesday December 14, 2016 @07:30PM (#13181161)

In this case an attacker isn't looking for a collision (which would mean creating two passwords with the same hash, and what hash that is doesn't matter).

The attacker needs a password with a specific hash, and the best reported attack for that is around 2^128.

[ Parent | on HN ]

Re:Yahoo discloses hack of 1B accounts by manarth on Wednesday December 14, 2016 @07:40PM (#13181234)

Agreed, that the best reported rainbow-table attack on MD5 is 2^128 (i.e. the complete range of possible MD5 hashes).

Personally, I'm willing to chance that my password will be discovered via a brute-force attack within the next 0.65 billion billion years [1]

[1] http://bitcoin.stackexchange.com/questions/2847/how-long-wou...

[ Parent | on HN ]

Re:Yahoo discloses hack of 1B accounts by leereeves on Wednesday December 14, 2016 @08:29PM (#13181545)

I think it does make sense to be cautious.

A new preimage attack could be discovered - or might already have been, secretly.

[ Parent | on HN ]