5 ms·
@CrackMeIfYouCan posted this on twitter: A bit of stats on last.fm leak: 1) It happened a WHILE ago. 2010/2011 2) 17.3 million raw-md5 3) 16.4 million crack
by jameswyse 14y ago
@CrackMeIfYouCan posted this on twitter:
A bit of stats on last.fm leak:
1) It happened a WHILE ago. 2010/2011
2) 17.3 million raw-md5
3) 16.4 million cracked. 95% cracked.
- drostie 14y agoNice to hear. I had thought that perhaps one of their higher-ups had used the same pass on LinkedIn as on Last.fm and had noticed suspicious activity. Now I know that they just googled to see, "oh, did anyone hack us? they did?! OVER A YEAR AGO?!"
- kalininalex 14y agoAny info on how and why so many were cracked? Passwords too simple?
- darklajid 14y agoMD5, unsalted. On commodity hardware you can compute those blazingly fast. A brute force attack, ignoring word lists, is totally possible. That's ignoring all the resources that offer access to precomputed hashes (I don't want to call a list of MD5 hashes a rainbow table). Easy or not, passwords saved with this scheme are unprotected.
- phase_9 14y agoUnsalted MD5s. http://www.codinghorror.com/blog/2012/04/speed-hashing.html http://www.codinghorror.com/blog/2012/04/speed-hashing.html
- toyg 14y agoWTF, A YEAR AGO ?? They didn't notify users (i.e. me). Aren't they in breach of California law? Where are they based?