News for hackers. Stuff that matters.
Re:Ask HN: How did my LastPass master password get leaked? by EVa5I7bHFq9mnYK on Tuesday December 28, 2021 @07:06AM (#29712953)
MD5 is long considered a broken, weak hash algorithm. Here is the MD5 hash of a password:

d9afca35a87a2af4168500640fcf2370

Password is 16 characters long, all lower case, no numbers, no special symbols.

Please tell me the password.

Re:Ask HN: How did my LastPass master password get leaked? by Retric on Tuesday December 28, 2021 @10:33AM (#29714663)
What percentage of people do you think actually use 16 character passwords?
Re:Ask HN: How did my LastPass master password get leaked? by 40four on Tuesday December 28, 2021 @01:47PM (#29716595)
Probably pretty low.

I use 64 character passwords, or if there is a length limit, always the longest possible. That’s the beauty of using a password manager :)

Re:Ask HN: How did my LastPass master password get leaked? by NmAmDa on Tuesday December 28, 2021 @11:28PM (#29721862)
Do you use 64 character master password?
Re:Ask HN: How did my LastPass master password get leaked? by DrivebySecurity on Thursday January 06, 2022 @11:39AM (#29825811)
One advantage about having memorized a bunch of poetry back in the day is I have a lot of secure long passphrases to hand

Aesop, my author, makes mention of two mice and they were sisters dear 1234567890123456789012345678901234567890123456789012345678901234567890

70 and little effort

Re:Ask HN: How did my LastPass master password get leaked? by mod on Thursday December 30, 2021 @08:03AM (#29736373)
I consider mine pretty long, and it's right around 30 characters.
Re:Ask HN: How did my LastPass master password get leaked? by tyingq on Tuesday December 28, 2021 @01:18PM (#29716297)
56 billion md5 hashes per second for $1.80 per hour at OVH. (single Nvidia Tesla v100 GPU)

Still a no-go for plain old brute forcing all a-z combinations. But, if your password is some combination of actual words, common keyboard sequences, or anything else in a password dictionary, it's cracked pretty quick/cheap.

Re:Ask HN: How did my LastPass master password get leaked? by yawaworht1978 on Tuesday December 28, 2021 @06:22PM (#29719580)
The best I could find is this

https://stackoverflow.com/questions/10041298/how-to-recover-...

But can you show me the way how you'd go on about this? Really curious.

Re:Ask HN: How did my LastPass master password get leaked? by pxx on Thursday December 30, 2021 @02:40AM (#29734592)
You can't. That's the point of the post. There is no known feasible pre-image attack on MD5.