I mean, why not tell everyone our password hashes?

Re:I mean, why not tell everyone our password hashes? by kennywinker on Saturday July 15, 2017 @03:38AM (#14775515)

I see a lot of people saying how easy it would be to crack this, but I don't see it cracked...

[ Parent | on HN ]

Re:I mean, why not tell everyone our password hashes? by vultour on Saturday July 15, 2017 @06:09AM (#14775933)

"Very easy to crack this! You just need a bajillion dollars, 5000 AWS instances and a couple minutes!"

Not surprised why no one tried yet.

[ Parent | on HN ]

Re:I mean, why not tell everyone our password hashes? by maccard on Saturday July 15, 2017 @08:34AM (#14776361)

I think it's a reasonable point. There's lots of armchair experts saying that md5 is broken, unusable, and anyone can reverse it, and here we are 14 hours later and nobody has proven it. Given that the claim was 12 minutes on a 25 machine cluster, that would imply 300 minutes of compute time which is 6 hours. This is hacker news, if it's not going to be done here, then no armchair enthusiasts are going to do it.

If someone can point me towards the tools and how to set it up, I'll leave my gtx1070 at it overnight and see.

[ Parent | on HN ]

Re:I mean, why not tell everyone our password hashes? by Govindae on Saturday July 15, 2017 @12:05PM (#14777342)

https://hashcat.net/hashcat/

I haven't used it, but FAQs, Forums, wikis, and tutorials are all out there.

[ Parent | on HN ]

Re:I mean, why not tell everyone our password hashes? by maccard on Monday July 17, 2017 @11:51AM (#14789648)

I will give it a try this weekend, thanks!

[ Parent | on HN ]