3 ms·

Agreed, it was a bit disappointing to get to the part where the password was added to the word list. The author does point out that a 2,000,000+ hashes per sec

by poglet 4y ago

Agreed, it was a bit disappointing to get to the part where the password was added to the word list. The author does point out that a 2,000,000+ hashes per second could be achieved so it might give insight into how quickly all accounts will be checked against popular word lists. If I was a last pass customer I would be thinking about changing passwords on all accounts.

agilob 4y ago
2,000,000+ H/s on macbook. I heard GPU clusters built purposely for quick hashing got cheaper recently.
- croes 4y ago
  2,000,000 on a multi GPU setup not a MacBook
- mattcoles 4y ago
  He didn’t achieve 2MH/s on his MacBook. That was the authors estimate of what you could achieve on a multi-GPU setup, it was only around ~1KH/s on the MacBook.
II2II 4y ago
> Agreed, it was a bit disappointing to get to the part where the password was added to the word list. Why is that disappointing? It is a proof of concept, rather than evidence that it has already been done. Sure, it is not novel and perhaps it is overstated, but it does point out that attacks are already possible. It would also be interesting to see the results of a dictionary attack to see if the behaviour of people who use password managers is any better than the population as a whole.