News for hackers. Stuff that matters.

A comment on NIST advises services to not require that passwords be changed periodically. Parent comment

Re:NIST advises services to not require that passwords be ch... by LinuxBender on Sunday May 21, 2017 @12:24PM (#14387942)
> If a password already takes longer than the age of the universe to practically brute-force

Give hashcat a go. Give me the hashes from HN. I bet we can break most of them in a day.

[ Parent | on HN ]
Re:NIST advises services to not require that passwords be ch... by xuu on Sunday May 21, 2017 @12:41PM (#14388002)
MD5: 4d515ed2753dd5c07b176613b21852aa SHA1: ff168736fed129633fba55731730603240c8ac42 SHA256: 27c8b803524883e07b5789ab10a606767d090ad4b8cca0f1c34f071aa8c7fb98

good luck

[ Parent | on HN ]
Re:NIST advises services to not require that passwords be ch... by LinuxBender on Monday May 22, 2017 @08:05PM (#14397828)
Here are some stats[1] from some real dumps.

[1] https://hashes.org/public.php

[ Parent | on HN ]