Another solution would be for these services to use something with a greater work factor than MD5. When a typical user can brute force MD5s at a rate of 8.5 bil

Another solution would be for these services to use something with a greater work factor than MD5. When a typical user can brute force MD5s at a rate of 8.5 billion per second with AMD HD7970 graphics card then it's time to use a different hashing algorithm. Something like scrypt or bcrypt with a larger work factor would make these attacks much harder and more expensive, while leaving the fundamentals of the system the same. http://hashcat.net/oclhashcat/ http://hashcat.net/oclhashcat/ https://www.tarsnap.com/scrypt.html https://www.tarsnap.com/scrypt.html https://en.wikipedia.org/wiki/Bcrypt https://en.wikipedia.org/wiki/Bcrypt