3 ms·
https://www.hivesystems.io/blog/are-your-passwords-in-the-green https://www.hivesystems.io/blog/are-your-passwords-in-the-gr... an 8-character password with th
by reaperman 4y ago
https://www.hivesystems.io/blog/are-your-passwords-in-the-green https://www.hivesystems.io/blog/are-your-passwords-in-the-gr...
an 8-character password with the usual upper/lower/special mix can be cracked in <1 hour by a single RTX 4090.
- myrion 4y agoThat's if hashed by md5, which really shouldn't be the case anymore. SHA-1 isn't much better, aiui, but would still be a more reasonable reference today - at least as far as I can see. I wish it were scrypt, PBKDF2 or argon2id - but I realize those are still rare.
- brokenmachine 4y agoWonder how many sites are still using md5...
- cornylisti 4y agomd5 was never supposed to even be used for passwords, it was designed to produce really fast checksums for files, a very bad property for a password hashing algorithm
- brokenmachine 4y agoSure. I wonder how many sites are still using md5...
- gray_charger 4y agoPBKDF2 should only be used if compliance with government requirements is a concern. While it can be adjusted to be arbitrarily difficult by changing the iterations it's still not memory intensive and can still be fairly easily cracked with a GPU (when compared to scrypt or argon2id).