Amazon EC2 Enables Cheap Brute-Force Attacks

snydeq writes "German white-hat hacker Thomas Roth claims he can crack WPA-PSK-protected networks in six minutes using Amazon EC2 compute power — an attack that would cost him $1.68. The key? Amazon's new cluster GPU instances. 'GPUs are (depending on the algorithm and the implementation) some hundred times faster compared to standard quad-core CPUs when it comes to brute forcing SHA-1 and MD,' Roth explained. GPU-assisted servers were previously available only in supercomputers and not to the public at large, according to Roth; that's changed with EC2. Among the questions Roth's research raises is, what role should Amazon and other public-cloud service providers play in preventing customers from using their services to commit crimes?"

Comments

Re:Offensive

[Anonymous Coward]

Probably because grandfathers tend not to be bitches.

Depends on Who You Ask

[carrier lost]

...should Amazon and other public-cloud service providers [be liable for] customers [...] using their services to commit crimes?

• MPAA/RIAA - If it aids in file-sharing, then Amazon should be charged $6M for each infringement
• Washington - If it aids in leaking US data, then Amazon should be "extraordinarily rendered"
• Wall Street - If aids the banks in looting the world's economies, then Amazon should get a $300M bonus.

Hope this helps...