Slashdot Mirror

← Back to Stories (view on slashdot.org)

Using Google To Crack MD5 Passwords

Posted by kdawson on from the secrets-shared-with-the-world dept.

stern writes "A security researcher at Cambridge was trying to figure out the password used by somebody who had hacked his Web site. He tried running a dictionary through the encryption hash function; no dice. Then he pasted the hacker's encrypted password into Google, and voila — there was his answer. Conclusion? Use no password that any other human being has ever used, or is ever likely to use, for any purpose. I think."

11 of 232 comments (clear)

  1. Obligatory by Anonymous Coward · · Score: 5, Funny

    In Soviet Amerika, MD5 passwords crack you.

    1. Re:Obligatory by CrazyJim1 · · Score: 5, Funny

      What about the flip side: Using Crack to Google MD5 passwords?

      --
      God spoke to me.
  2. Let me guess by GroeFaZ · · Score: 5, Funny

    The password was hunter2?

    --
    The grass is always greener on the other side of the light cone.
    1. Re:Let me guess by omnipresentbob · · Score: 5, Funny

      What's with all the stars in your post?

  3. Re:Salt by eldavojohn · · Score: 5, Funny

    And blackjack ... and hookers. In fact, forget the hashes!

    --
    My work here is dung.
  4. Re:I wouldn't be too alarmed. by SevenDigitUID · · Score: 5, Funny

    That is totally unfair to the wordpress developers. Just because they don't care doesn't mean they don't understand.

  5. Re:RTFA by eln · · Score: 5, Funny

    You're correct. You have totally invalidated the points I brought up in my post. Good show.

  6. Re:Salt by Anonymous Coward · · Score: 5, Funny

    Ice building up on your sidewalk? Salting breaks it.

  7. Re:MD5 Lookup Site & Names by joNDoty · · Score: 5, Funny
    Crap. From their "about" page:

    Additionaly everytime when you enter a non-md5 hash string into the search field, the md5 result for that search strings gets stored in our database for future use. Thanks for warning me. I tested to see if my password was in there... it is now!!!
  8. Re:Salt by maxwell+demon · · Score: 5, Funny

    This is slashdot, we need a bad car analogy too. :P Your car rusting too slowly? Salt solves that! :-)
    --
    The Tao of math: The numbers you can count are not the real numbers.
  9. Re:Credibility? by neonsignal · · Score: 5, Funny

    I looked these up on google, and they directed me to some slashdot page...