News for hackers. Stuff that matters.
Re:A Really Good Article on How Easy it Is to Crack Passwords by pbreit on Thursday September 05, 2013 @05:58AM (#6333123)
The Ars article seemed totally irrelevant to me since it used MD5?
Re:A Really Good Article on How Easy it Is to Crack Passwords by 16s on Thursday September 05, 2013 @07:23AM (#6333434)
Microsoft Active Directory servers (used in big business and government all over the world) uses one round of MD4 (no salt). That's a 4, not a 5.
Re:A Really Good Article on How Easy it Is to Crack Passwords by yk on Thursday September 05, 2013 @08:32AM (#6333692)
The cracking technique discussed is dictionary plus some common substitutions. So the hashing algorithm is not very important. You would loose some factor of speed, but the 1000 most common passwords times 10 common substitutions, perhaps with 100 postfixes is still only 1 million hashes. And you would crack with these some non negligible fraction of the passwords in an unsalted database in probably under a minute. ( If the passwords are salted in the db, then you need a minute per hash, so assuming that you crack a few percent of the hashes you try, then you expect one password in under two hours even with modern password hashes.)