Hacker News Reader

Comment by grav | Hacker News Reader

How did someone manage to find the image from the SHA hash?

I just made a lucky guess from the keywords in the article:

    $ echo -n 'P100D' | sha256sum 
    5fc38436ec295b0049f186651ebba5fd55e8d7b81eb61cbd00d3f1bf18dd9c81

It's so short that you can also just brute force it. Using hashcat in "try all short alphanumeric+symbols strings in increasing length" mode on this hash produces the resulting string in about ten seconds on my computer.

I imagine it was just guessed, though. Any Tesla fan thinking of "cool new upgrade to the car, currently secret" would put a P100D model near the top of the list of things to try.

Yep. There are plenty of sites that have already brute-forced hashes for arbitrary n-length alphanumeric strings.

https://md5hashing.net/hash/sha256/5fc38436ec295b0049f186651...

He clearly should have added a salt to that hash..

It wasn't an image, just the text.

If you put 5fc38436ec295b0049f186651ebba5fd55e8d7b81eb61cbd00d3f1bf18dd9c81 into the google, the second link (because first is article about it) will tell you what it is[1].

[1] https://md5hashing.net/hash/sha256/5fc38436ec295b0049f186651...

> P100D

> (a reverse lookup of the hash posted above yields this)

5 days ago, http://www.teslamotorsclub.com/showthread.php/58951-Let-the-...

Reply on news.ycombinator.com