3 ms·

You would have to disallow weak passwords. It should be at least as cryptographically hard to crack as (the also fully public) Bitcoin network. Also, turn the

You would have to disallow weak passwords. It should be at least as cryptographically hard to crack as (the also fully public) Bitcoin network. Also, turn the bad guys into good ones by offering a reward for any cracked credentials (if the credentials are not used within a particular period of time). Seed the system with fake credentials that can be used by authorities to track down criminals (if used of course). Essentially, build a game with the right incentives.

lxgr 3y ago
> You would have to disallow weak passwords. That's unfortunately very hard: Determining what constitutes a weak password is computationally more expensive than actually attacking a database dump of many weak password hashes. > turn the bad guys into good ones by offering a reward for any cracked credentials What bad guy would take your reward if it's lower than the value at risk? And if the reward is higher – how would you fund that? > Seed the system with fake credentials that can be used by authorities to track down criminals How? This might work for online account takeovers, but not for the problem discussed in the article, i.e. compromised crypto wallets. Hash cracking doesn't leave a fingerprint.