Online MD5 Cracking Service

toast writes "Did you forget your password but have your /etc/shadow? If so, this site is for you. Submit a MD5 hash and within a few days you'll have an answer. Of course, once Slashdot has its way, you'll have to wait a few years for an answer.. At least now I'll always know what f3789b3c1be47758203f9e8a4d8c6a2a means.."

Comments

A /. 1st?

[Your_Mom]

All joking aside, how much do you want to bet this is the first time the slashdot effect /really/ causes a computer to catch fire due to excessive processor heat?

Re:A /. 1st?

[TitanBL]

Ya, cause I bet it the software does not queue the requests or anything fancy like that...

Re:A /. 1st?

[allenw]

Hopefully it is running BeOS as its is_computer_on_fire() call will provide at least some protection.

Re:A /. 1st?

[Anonymous Coward]

i think it will be my fault for submitting the knoppix iso md5 hash

Re:A /. 1st?

[Aeiri]

They can also use Linux. If you check the Linux source, not only does it check if your CPU is on fire, it also checks to see if your printer is on fire!

# cd /usr/linux/src
# egrep -ri "(on fire)" *

This will return a lot, but here are two of the results:

arch/i386/kernel/cpu/mcheck/p5.c: printk(KERN_EMERG "CPU#%d: Possible thermal failure (CPU on fire ?).\n", smp_processor_id());

drivers/usb/class/usblp.c:static char *usblp_messages[] = { "ok", "out of paper", "off-line", "on fire" };

What it really means

[Zorilla]

At least now I'll always know what f3789b3c1be47758203f9e8a4d8c6a2a means..

Processing....

(Three days later)

Processing Complete: Result is 42

Re:What it really means

[Anonymous Coward]

So what the parent is really saying is that the question to life, the universe, and everything is "goatse"? and the answer is 42....expalins so much..

Re:What it really means

[Pharmboy]

But don't cue a beowulf of goatse!

Passwords

[Laivincolmo]

I hope they can't identify information that could link you to your password... I guess most people would change it afterwards. Also, is there a possibility of abuse by this system for cracking other people's passwords?

Re:Passwords

[Anonymous Coward]

Also, is there a possibility of abuse by this system for cracking other people's passwords?

No, none at all. There is no chance whatsoever that a system designed to crack passwords could be used to crack other people's passwords. If you took the time to check it out, you'd see that there's a check box before you submit that says:

[]Check here if this is your password.

Now how could you ever abuse that?

We offer a similar service

[Anonymous Coward]

Just send us your:

1. SS#
2. Mother's maiden name
3. Address of the account with the forgotten password
4. ID of the account with the forgotten password
5. MD5 Hash of the forgotten password

Please send all info to The Good Samaritans c/o Nigerian Embassy.

Re:Hmmmmmm

[xlyz]

you should not worry about it

they just publish it on the internet

Re:Question

[Zeebs]

What /etc/passwd leaves against a surface when you shine a light at it.

possible answer:

[sinnfeiner1916]

because Visual Basic isn't case sensitive?

hash

[k31bang]

All this talk about Hash is making hungry for brownies.

Re:Hmmmmmm

[Richard_at_work]

And the best part of it, it actually says that in the blurb at the top of this page!!! Sheesh, have we stopped reading the slashdot writeup now? Is it really true that we have become a civilisation where our attention spans are measured in microseconds? Does the title have to have 'sex' or something in it to gain more scrutiny?

Re:Hmmmmmm

[Alsee]

!!!!!
Did someone mention sex?

-

Re:Umm..

[Anonymous Coward]

Why is that? Why couldn't I have 1 character in my password? All of you security buffs think you are good at math with your fancy crypto, but I won't be impressed til the day you come up an uncrackable 1 character password algorithm.

Profit!

[pseudochaotic]

Step 1: Create a service that does something which needs a password hash
Step 2: Get a bunch of bored slashdotters to post their password hashes, and log their IPs
Step 3: Crack the hashes, keep the passwords
Step 4: h4xx0r!

damn, that's my password...

[laejoh]

At least now I'll always know what f3789b3c1be47758203f9e8a4d8c6a2a means.."

Damn!!! They cracked my password already. Better go and change it.

Re:Interesting...

[drix]

Ah ha! You've got `em, you cunning sleuth, you.

It will be a cold day in Hell before I hand my /etc/shadow over to a Chinese person.

Thank you so very much for enlightening me and the rest of /. about this very pertinent, sensitive and telling piece of information.

Re:Nothing new.

[hey]

hey's rule: for every slashdot article about something new and cool there exists at least one posting saying that its been done before.

Re:Hmmmmmm

[Anonymous Coward]

Quit exagerrating. Slashdot has only improved my attention span by... Hey, cool, China's deploying an IPv9 Network!

Re:Umm..

[pyrrhonist]

Pointless. You could just enter in all the characters in the character set...

Ahhhh, but what he failed to mention is that it's one character of the unicode character set!

Imagine if this was spaceballs with a twist

[whiteranger99x]

ROLAND The combination is (hesitates) 827ccb.
HELMET 827ccb.
SANDURZ 827ccb. (writes)
ROLAND 0eea8a.
HELMET 0eea8a.
SANDURZ 0eea8a. (writes)
ROLAND 706c4c.
HELMET 706c4c.
SANDURZ 706c4c (writes)
ROLAND 34a1689.
HELMET 34a1689.
SANDURZ 34a1689. (writes)
ROLAND (hesitates) 1f84e7b.
HELMET 1f84e7b.
SANDURZ 1f84e7b. (writes)
HELMET So the combination is 827ccb0eea8a706c4c34a16891f84e7b (lifts mask) That's the stupidest combination I've ever heard in my life. That's the kinda thing a fucking n00b would have on his Windows box. ;)

827ccb0eea8a706c4c34a16891f84e7b!

[Griim]

"827ccb0eea8a706c4c34a16891f84e7b?? That's the same combination that's on my luggage!"

Re:Dictionary attack

[fataugie]

(I'm glad my root password is 16 chars long).

See, that's why I have a blank root password...so they spend all that time cracking something that doesn't exist.

Re:Dictionary attack

[JPriest]

This method and more in the next version of 101 ways to abuse virtual hosting package.

Re:Nothing new.

[arose]

I think I have heard that before...

Re:Interesting...

[BJH]

Personally, I'd be more worried about handing my password over to someone whose main point of contact is a Hotmail address.

Re:Nothing new.

[drinkypoo]

How many Slashdotters does it take to change a light bulb? One to change it, another one to change it again, and then fifty or sixty more to let everyone know the precise date and time of the first changing.

Re:Um....couldn't you just change it yourself?

[Pharmboy]

or pass "linux 1" to the kernel, at least in RH. Also, what is this /bin/bah shell you speak of? Is it part of the humbug package? ;)

Re:Dictionary attack

[julesh]

Unfortunately, some of us here know the empty MD5 well enough to recognise it on site. It's the only one I've ever seen that contains the string '98 foob2'.

I'm not entirely sure what a foob is, but I'm pretty sure we have at least 98 of them here.

Re:Question

[Feanturi]

What's Google, where do I download it?

(just kidding)

Re:Stop yammering about your passwords, folks

[twiddlingbits]

Is Linux salt like Morton's Salt? Would that be idodized, non-iodized, rock, kosher, or sea salt? ;) How many teaspoons are neededto salt the Hash? And what if I want pepper too,does that mess up the amount of Salt needed... (a little levity never hurts cryptographic discussions)

Re:Dictionary attack

[NuclearDog]

"(I'm glad my root password is 16 chars long)"

I count 28 digits for my root password: "mOdoviNcismodOvincEris521252"

So this means they couldn't crack mine, I assume?

(For the curious, "Modo Vincis, Modo Vinceris" = "You win some, you lose some.")

ND