News for hackers. Stuff that matters.

A comment on SEC charges Nvidia with inadequate disclosures about impact of cryptomining. Parent comment

Re:SEC charges Nvidia with inadequate disclosures about impa... by px43 on Tuesday May 17, 2022 @08:03AM (#31409208)
Do you think it's more than 5%? Maybe it is, but it seems like every place that offers GPU rental services (Amazon, Vast, etc) they are being used almost exclusively for machine learning applications. The rate they can be rented out is 3-4 times higher than would be profitable for any cryptocurrency mining, which should be a pretty solid indicator of where the demand is actually coming from.

I know I'm in the minority, but my GPUs are used almost exclusively for password cracking. I've got ASICs for the crypto mining.

[ Parent | on HN ]
Re:SEC charges Nvidia with inadequate disclosures about impa... by lvl102 on Tuesday May 17, 2022 @08:17AM (#31409386)
I think the overall impact of crypto is 30-35% of their business.
[ Parent | on HN ]
Re:SEC charges Nvidia with inadequate disclosures about impa... by muttled on Tuesday May 17, 2022 @10:01AM (#31410782)
I had a rig on Vast. It wasn't 100% utilized. It mined crypto when it wasn't rented for ML applications.
[ Parent | on HN ]
Re:SEC charges Nvidia with inadequate disclosures about impa... by rytill on Tuesday May 17, 2022 @09:15AM (#31410071)
What software do you use for GPU password cracking? Custom? And for what purpose?
[ Parent | on HN ]
Re:SEC charges Nvidia with inadequate disclosures about impa... by gaspard234 on Tuesday May 17, 2022 @10:45AM (#31411479)
I worked at a security consulting firm that had an 8 GPU password cracking rig. Teams would be able to send it hashes obtained during assessments/red teams and try to discover passwords.

I was not doing that type of work so I'm not sure what type of software was used but I think it had multiple open source programs available.

[ Parent | on HN ]
Re:SEC charges Nvidia with inadequate disclosures about impa... by px43 on Thursday May 19, 2022 @10:02AM (#31434773)
Like others said, hashcat. Doing pentest/red team stuff, you quite often stumble across password hashes that can do some pretty cool stuff if you can crack them.

Did you know that if you're on a Windows network, random machines all around you will just try to authenticate to you, and disclose the hash of the user on the system? Plug in on a Ethernet jack in the lobby, or conference room, get onto the wifi, compromise any machine on the network and run responder or inveigh, and you just get dumps of user passwords, and if you can crack any of them, its a pretty quick path up to Domain Admin on the network, which then can dump everyone's hashes.

[ Parent | on HN ]
Re:SEC charges Nvidia with inadequate disclosures about impa... by h4waii on Tuesday May 17, 2022 @01:03PM (#31413538)
hashcat.
[ Parent | on HN ]