3 ms·
Pretty much even if you choose a high entropy password like say: `]{;&<C9v98QO#]M~Ff$>rQQQjoJkxm0ayM+gG,@vf*>#-{X4E>aZG(A1~tf<Wu the MD5 algorithm can be br
by JonDav 10y ago
Pretty much even if you choose a high entropy password like say:
`]{;&<C9v98QO#]M~Ff$>rQQQjoJkxm0ayM+gG,@vf*>#-{X4E>aZG(A1~tf<Wu
the MD5 algorithm can be broken using various techniques like collisions, unsalted I believe means that their database would accept the hashes the third party has. End result is they should have migrated away from MD5 after it was declared unsafe.
- deleted 10y ago[deleted]
- danielweber 10y agoNo it can't. Two principles here: 1. If your password is very very good (a Diceware password would suffice), then any method of storing passwords that is better than storing them in plaintext will stop someone from brute forcing it. 2. If your password is very bad, then even an excellent password hashing algorithm will not save you. "Just use bcrypt" is meant to save people who are in the middle.
- Buge 10y agoNo, a collision attack would not give you the plaintext from a hash. A first preimage attack would do that, but no computable first (or second) preimage attacks against md5 have been found. https://stackoverflow.com/questions/822638/does-any-published-research-indicate-that-preimage-attacks-on-md5-are-imminent https://stackoverflow.com/questions/822638/does-any-publishe...