4 ms·
Good news for people who followed best practices. "I don't have to outrun the bear; I just have to outrun you."
by yasp 4y ago
Good news for people who followed best practices. "I don't have to outrun the bear; I just have to outrun you."
- jacquesm 4y agoThere isn't just one bear.
- AlexCoventry 4y agoThis bear has the ability to spin up an AWS cluster of bears, unfortunately.
- dijit 4y agoAWS is probably the most expensive way to do this. Either rent some machines from an ex-crypto miner, since AES can be decyphered on GPUs or get some old extremely cheap boxes from the hetzner auction.
- nikau 4y agoPeople who are trying to crack these passwords are also likely to be using compromised AWS accounts.
- yasp 4y agoThey're still subject to economic considerations (assuming a non-state actor). If the expected value on a cracked account is less than the expected cost to crack it, a rational actor won't bother. That they may use cracked AWS accounts, or botnets, to perform this cracking does not change these economic considerations.