Okay I understand this much better now. I was assuming this was about remote access exploit not a local one.
Point taken. Use SHA-? instead of MD5.
Point taken. Use SHA-? instead of MD5.
SHA family, including the rather unrelated but exceptionally nifty SHA-3 (Keccak), are still hash functions and are still really fast to compute (good if you need to verify the contents of something, bad if you need to store secure information). A decent GPU can still crack SHA hashes effortlessly, and a dedicated attacker will have some good FPGAs (in which case you'll be cracked in hours). Use a function that is meant for storing passwords.