4 ms·
This. For more information on why this is the case, here's a pretty good article on it. http://arstechnica.com/security/2012/08/passwords-under-assault/ http:/
by rapind 14y ago
This. For more information on why this is the case, here's a pretty good article on it.
http://arstechnica.com/security/2012/08/passwords-under-assault/ http://arstechnica.com/security/2012/08/passwords-under-assa...
The simplified version: Every time a password is cracked it is added to a database of hashes used to hack other databases. Essentially crowdsourced cracking.
- Evbn 14y agoThat only works on broken sites that don't salt.
- IgorPartola 14y agoIf I was to try to break salted passwords, my first inclination would be to find the largest set of known passwords and try those before resolving to a pure brute-force approach. Thus if you password "ILikePuppies" is ever exposed as a password, then I would consider it insecure.
- rapind 14y agoNot as rare as you might believe. http://www.theregister.co.uk/2012/06/07/linkedin_admits_data_breach/ http://www.theregister.co.uk/2012/06/07/linkedin_admits_data...