This story is archived

Google as a Password Cracker? »

Archived 54 0 drops

While doing forensics, I thought it would be interesting to find out the account password. Wordpress stores raw MD5 hashes in the user database (despite my recommendation to use salting). As with any respectable hash function, it is believed to be computationally infeasible to discover the input of MD5 from an output.

Read Full Story at lightbluetouchpaper.org »

Submitted By:

tdrapeau

Tom Drapeau is the Director of Propeller social news. He enjoys all manner of geekery and internet foolishness. He has seen every episode of Battlestar ...

This Story is Archived and Commenting is Closed

Comments: 14

Avg rating: (+0/-0 0)
tdrapeau
Nov. 20, 2007, 5:22 p.m.
I just tried this with the MD5 for "test" - check out the results: http://farm3.static.flickr.com/2001/2050503101_...
Avg rating: (+0/-0 0)
blainegarrett
Nov. 20, 2007, 5:54 p.m.
md5 was officially cracked not long ago.
http://en.epochtimes.com/news/7-1-11/50336.html
It is still an expensive process to reverse md5s. But there are sites like the below that have a waiting period...
http://passcracking.com/
eek
Avg rating: (+0/-0 0)
tdrapeau
Nov. 21, 2007, 9 a.m.
@blainegarrett: From the article you linked to-
Within four years, the U.S. government will cease to use SHA-1 (Secure Hash Algorithm) for digital signatures, and convert to a new and more advanced "hash" algorithm, according to the article "Security Cracked!" from New Scientist . The reason for this change is that associate professor Wang Xiaoyun of Beijing's Tsinghua University and Shandong University of Technology, and her associates, have already cracked SHA-1.
Nice. Cracked today, US government will stop using it.... later.
Avg rating: (+0/-0 0)
hlebzx
May 21, 2008, 3:49 p.m.
The whole story started back in 1996, shaped as a research project, its parents being Larry Page and Sergey Brin, and the original search engine was nicknamed "BackRub", but that's history already. Before I return to my Google party here, there's one more interesting thing that needs to be known :p
http://pricelistreview.org