News for hackers. Stuff that matters.
Re:HipChat security notice by cypherg on Monday April 24, 2017 @06:07PM (#14188830)
it's considered best security practice to do so
Re:HipChat security notice by 925dk on Monday April 24, 2017 @06:50PM (#14189163)
By whom?
Re:HipChat security notice by Godel_unicode on Monday April 24, 2017 @07:57PM (#14189603)
Science.

You might find the below numbers interesting. Note that this performance is only one workstation with 8x gtx980. Even the mighty bcrypt (sidebar, look at the sha512 #s) won't save you if your password is bad. Now consider social media mining to enhance the word list. Now consider that (anecdotally) I have never done a hashcat audit and not had to have a conversation with someone about choosing better passwords:

Hashtype: bcrypt, Blowfish(OpenBSD) Workload: 32 loops, 2 accel

Speed.GPU.#1.: 6398 H/s Speed.GPU.#2.: 6507 H/s Speed.GPU.#3.: 6513 H/s Speed.GPU.#4.: 6643 H/s Speed.GPU.#5.: 6534 H/s Speed.GPU.#6.: 6512 H/s Speed.GPU.#7.: 6689 H/s Speed.GPU.#8.: 6542 H/s Speed.GPU.#*.: 52338 H/s

https://gist.github.com/epixoip/c0b92196a33b902ec5f3