Hacker News Reader

I suppose that means if someone managed to get their hands on a database with MD5 hashed password and we disregard the time it takes to query the harddrive for a match; it could (stupidly) brute-force it's way to any 5 character password consisting of a-Z, 0-9 and !"#€%&/()=?+ in about 0.06 seconds. Or a 6 character password just under a minute.

That's pretty impressive.

View on HN

Then again, anyone who works on md5 password "cracking" for a living would likely already have the set of all 5 character printed passwords hashed and sitting in a database ready for recall with no need to speedily crank through them.

To understand why your comment does not make sense, please read this:

http://en.wikipedia.org/wiki/Salt_%28cryptography%29

There have been an embarrassing number of cases where an application has used the same default salt on all passwords.

That assumes the Gawkers of the world salt their passwords...

Overkill, considering a lot of people still use 'password'.

btw, the url you list in your profile appears to be blocked by openDNS, reckons it's a phishing site.

It's an email redirection service I've been using since 1994.

Reply on news.ycombinator.com