Slashdot Mirror
Using Google To Crack MD5 Passwords
stern writes "A security researcher at Cambridge was trying to figure out the password used by somebody who had hacked his Web site. He tried running a dictionary through the encryption hash function; no dice. Then he pasted the hacker's encrypted password into Google, and voila — there was his answer. Conclusion? Use no password that any other human being has ever used, or is ever likely to use, for any purpose. I think."
In Soviet Amerika, MD5 passwords crack you.
I agree. Also, fry them in bacon fat and add pepper.
So the combination is 827ccb0eea8a706c4c34a16891f84e7b. (lifts mask) That's the stupidest combination I've ever heard in my life. That's the kinda thing an idiot would have on his luggage.
The password was hunter2?
The grass is always greener on the other side of the light cone.
And blackjack ... and hookers. In fact, forget the hashes!
My work here is dung.
5f4dcc3b5aa765d61d8327deb882cf99 is the MD5 hash for 'password'.....
search enough systems and you're bound to see some doosh has used it.
That is totally unfair to the wordpress developers. Just because they don't care doesn't mean they don't understand.
You're correct. You have totally invalidated the points I brought up in my post. Good show.
If you've ever used wordpress before and actually looked at the code, you'll know right away that wordpress inc. does not employ programmers.
MABASPLOOM!
He can't be much of a "security researcher" if someone hacked his own website.
Free means no restrictions, ironic the FSF's GPL forces restrictions, isn't it? What's your definition of free?
A horse can't be sick, you know, even if he wants to.
Results 1 - 10 of about 101,000 for d41d8cd98f00b204e9800998ecf8427e. (0.04 seconds)
That's remarkably close to my password hash:
> Do0d+H!$p@SsW0rD!$t0ta1y$eCuRe
Ice building up on your sidewalk? Salting breaks it.
Pretzels missing that unique flail? Salting solves it!
:P)
Need something else to put on those fries? Salt it!
Need to make your friend's drink taste awful? Salt is the way to go.
(Somewhere along the line we left the analogy department
There are two kinds of fool One says 'This is old therefore good' Another says 'This is new therefore better'- Dean Ing
And sure enough, if you read the comments to the blog, there is a site called http://md5.rednoize.com/ that reveals that the hash is "Anthony." So although Google helped, there appears to be resources online for it (if you don't have your own Rainbow Table mega database).
Another reverse md5 hash lookup
I have to agree with everyone else so far, pass the Salt.
No one cares what your captcha was
Houston TX, USA
With all my respect, 596a96cc7bf9108cd896f33c44aedc8a
The Tao of math: The numbers you can count are not the real numbers.
When a problem comes along, you must salt it.
Before the cream sits out too long, you must salt it.
When something's going wrong, you must salt it.
Now salt it! Salt it good!
I looked these up on google, and they directed me to some slashdot page...
But nobody will guess that the search string "jennifer lopez" is my actual password. I am still safe for now.
Obama likes poor people so much, he wants to make more of them.
a rad ass custom mod chip that the user injects into the cerebral cortex and obdulla loongggatta and up down undah. The user then develops Tourettes Syndrome out the ass and has shit for brains now and only has to utter some crazy fucking ass phrase to seed a crazy fucking password in the solid-state gene-erator cuz they've gone fucking goddam crazy over that motherfuckin' chip in their ass and brain.
Crazy fucking luser. Crazy fucking assword. Crazy fuckin' whirled up world.
The above is the 1.0 tourettes pack, silver. Stainless-fucking-steel adds an additional language pack...
Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"