StockX was hacked, exposing millions of customers’ data

Re:StockX was hacked, exposing millions of customers’ data by SkyPuncher on Monday August 05, 2019 @02:18AM (#20611700)

You need to update yourself on the vulnerability of MD5.

5 years ago, a run of the mill gaming PC could crack an MD5 hash in a reasonable amount of time. Worst case, you'd have to let it run overnight.

One of the big issues is collisions. You might not find the original key, but you'd find something that hashed to the equivalent output.

[ Parent | on HN ]

Re:StockX was hacked, exposing millions of customers’ data by FDSGSG on Monday August 05, 2019 @08:21AM (#20613495)

> Worst case, you'd have to let it run overnight.

AFAIK the best current preimage attack against MD5 gives you a complexity of 2^123.4. Even if you had every computer in the world working on this you'd never succeed.

>One of the big issues is collisions. You might not find the original key, but you'd find something that hashed to the equivalent output.

This is false. There does not exist a feasible preimage attack against MD5.

[ Parent | on HN ]