4 ms·
Hopefully they are salted with a unique ID because of the are using a md5sum only then you're screwed with rainbow tables.
by techntoke 8y ago
Hopefully they are salted with a unique ID because of the are using a md5sum only then you're screwed with rainbow tables.
- tialaramex 8y agoRainbow tables are impractical with either salt, or more password entropy. If you use actual random passwords of, say, twelve alphanumerics because you have a password generator then even a bad choice like md5(password) is not practical to attack with brute force or rainbow tables. The most famous application of rainbow tables is one of Microsoft's family of terrible password hashes LM. But the reason it breaks that wide open is not just the lack of salt, it's also that LM hash only works for 7 character passwords, and up to 14 chars are supported by doing two entirely separate hashes - so you can craft rainbow tables for all possible 7 character inputs and then reverse the hash.
- unfunco 8y agoI'm going to go out on a limb and say Docker are unlikely to be using MD5, salted or otherwise.
- techntoke 8y agoAgreed.