6 ms·
Seems that "mining" the MD5 passwords is now more profitable than directly mining Bitcoins - at least there's some GPU power out there ;)
by gst 15y ago
Seems that "mining" the MD5 passwords is now more profitable than directly mining Bitcoins - at least there's some GPU power out there ;)
- astrodust 15y agoMD5? Are you kidding me? There should be capital punishment in software development for things like that.
- vog 15y agoIt is not so much about MD5, but more about not using a random salt for each password. Stronger hash algorithms such as SHA-1 suffer exactly the same issues when used improperly (i.e. when stored without salt, or data is exchanged without HMAC). http://en.wikipedia.org/wiki/Salt_%28cryptography%29 http://en.wikipedia.org/wiki/Salt_%28cryptography%29 http://en.wikipedia.org/wiki/HMAC http://en.wikipedia.org/wiki/HMAC
- wlll 15y agoI'll just leave this here: http://codahale.com/how-to-safely-store-a-password/ http://codahale.com/how-to-safely-store-a-password/