4 ms·
Long, random strings with weird characters are unlikely to be in any md5 dictionary, so you'd have to bruteforce it. MD5 is a fast algo so that shouldn't take
by redthrowaway 15y ago
Long, random strings with weird characters are unlikely to be in any md5 dictionary, so you'd have to bruteforce it. MD5 is a fast algo so that shouldn't take long for short passwords, but it does provide some security. If you've chosen a strong password then bruteforcing isn't a concern, so the fact they <s>hashed instead of encrypting</s> (edit: used a weak hashing algo) won't matter.
It's better than nothing, but not much. The fact that they md5'd it at all suggests they were thinking about security, just not very hard or well.
- true_religion 15y ago> If you've chosen a strong password then bruteforcing isn't a concern, so the fact they hashed instead of encrypting won't matter. Why would you encrypt passwords instead of hashing? Encryption by definition is two-way, so you can retrieve the original password.
- redthrowaway 15y agoMy bad, that was lazy of me. I was using the words sloppily. By "encryption", I was simply trying to say, "hard to break". I know that's not what it means, and apologize for any confusion.
- Freaky 15y ago> MD5 is a fast algo so that shouldn't take long for short passwords Indeed: http://www.golubev.com/hashgpu.htm http://www.golubev.com/hashgpu.htm On my pair of HD 5870's I get about 6.3 billion hashes/sec - with lowercase alphanumerics, that's up to 8 characters in about 8 minutes, 9 in 5 hours, and 10 inside a week.
- redthrowaway 15y agoPair of HD 5870's... BitCoin mining? I'd heard they were the most cost-effective card for it.