9 ms·
Many of today's top passwords can be brute force cracked in less than an hour
- josephcsible 2y agoIf they were hashed with a single iteration of MD5.
- rstuart4133 2y ago+1 It's a journo's rehash of blog post from Kaspersky. The blog post looks to be a brand awareness exercise. The substance is they reported benchmarks of throwing a bunch of single round + MD5 passwords at hashcat running on a Nvidia RTX 4090. Turns out it's quick: 164 billion hashes per second. If you assume a randomly generated password has 6 bits of entropy per character, then this will brute force a 8 character random password in under 30 minutes. 12 characters will extend that to a millennia. The real take away is if you aren't using PBKDF2 or better to store passwords you are a menace to society.
- gnabgib 2y agoThis seems to be a version of Nvidia's flagship gaming GPU can crack complex passwords in under an hour (19 points, 18 days ago, 36 comments) https://news.ycombinator.com/item?id=40551848 https://news.ycombinator.com/item?id=40551848 Which is itself a version of Are Your Passwords in the Green? (2024 edition) (1+1+1+3+3 points, submitted 2mo-4yr ago, limited HN engagement)