4 ms·
"How costly it is to guess SHA256 passwords: https://archive.is/vOn9q https://archive.is/vOn9q (instead of 1000 guesses/second, it's more like ~1197962070743187
by aptwebapps 7y ago
"How costly it is to guess SHA256 passwords: https://archive.is/vOn9q https://archive.is/vOn9q (instead of 1000 guesses/second, it's more like ~1197962070743187 guesses/second)"
He seems to have taken this bit from the linked article:
"In 2013, Bitcoin miners collectively performed ≈ 2⁷⁵ SHA-256 hashes"
and divided by the number of seconds in a year to figure out how long how many SHA-256 hashes can be calculated per second. But that's all of the Bitcoin miners in the world (in 2013, but still).
Anyway, use a password manager and don't reuse passwords and this is all moot.
- Semiapies 7y agoAlso, don't hash passwords with fast algorithms.
- lonelappde 7y agoThat's not my choice to make
- Semiapies 7y agoGiven how many systems don't use proper password hashing algorithms, it's a lot of peoples' choices. When it's yours, don't fuck it up.
- NoodleIncident 7y agoThese tweets seem to have been written by the crypto nerd from https://xkcd.com/538/ https://xkcd.com/538/ No, the US Government isn't going to build a supercomputing cluster to crack "correcthorsebatterystaple", and if they did, you're screwed anyway.