News for hackers. Stuff that matters.

A comment on Whitepixel v2 now brute forcing 33.1 billion password/sec.

Re:Whitepixel v2 now brute forcing 33.1 billion password/sec by ique on Tuesday December 14, 2010 @07:44AM (#2003972)
I suppose that means if someone managed to get their hands on a database with MD5 hashed password and we disregard the time it takes to query the harddrive for a match; it could (stupidly) brute-force it's way to any 5 character password consisting of a-Z, 0-9 and !"#€%&/()=?+ in about 0.06 seconds. Or a 6 character password just under a minute.

That's pretty impressive.

[ Parent | on HN ]
Re:Whitepixel v2 now brute forcing 33.1 billion password/sec by dedward on Tuesday December 14, 2010 @11:12AM (#2004581)
Then again, anyone who works on md5 password "cracking" for a living would likely already have the set of all 5 character printed passwords hashed and sitting in a database ready for recall with no need to speedily crank through them.
[ Parent | on HN ]
Re:Whitepixel v2 now brute forcing 33.1 billion password/sec by nomis80 on Tuesday December 14, 2010 @11:43AM (#2004705)
To understand why your comment does not make sense, please read this:

http://en.wikipedia.org/wiki/Salt_%28cryptography%29

[ Parent | on HN ]
Re:Whitepixel v2 now brute forcing 33.1 billion password/sec by astrodust on Tuesday December 14, 2010 @12:12PM (#2004828)
There have been an embarrassing number of cases where an application has used the same default salt on all passwords.
[ Parent | on HN ]
Re:Whitepixel v2 now brute forcing 33.1 billion password/sec by endtime on Tuesday December 14, 2010 @11:55AM (#2004761)
That assumes the Gawkers of the world salt their passwords...
[ Parent | on HN ]
Re:Whitepixel v2 now brute forcing 33.1 billion password/sec by stcredzero on Tuesday December 14, 2010 @08:47AM (#2004099)
Overkill, considering a lot of people still use 'password'.
[ Parent | on HN ]
Re:Whitepixel v2 now brute forcing 33.1 billion password/sec by retube on Tuesday December 14, 2010 @10:09AM (#2004384)
btw, the url you list in your profile appears to be blocked by openDNS, reckons it's a phishing site.
[ Parent | on HN ]
Re:Whitepixel v2 now brute forcing 33.1 billion password/sec by stcredzero on Tuesday December 14, 2010 @12:19PM (#2004863)
It's an email redirection service I've been using since 1994.
[ Parent | on HN ]