Hacker News Reader

Your quote includes the most significant part of the article "and put my actual vault master plaintext password inside".

He took a word list which did not include his password and put his actual password in the word list. He didn't crack his password, he showed that a brute force password guesser can find passwords that are in its word list. If he wanted to save six hours, he could have put it first in the password list. No news here.

View on HN

Yes, which is why I'm so skeptical of that claim. "I've put the password in because otherwise it would've taken 6 hours" makes no sense at all - even putting aside my napkin calculation; if it would've taken an afternoon of crunching, why wouldn't you just have done that?

because 6+ hours is too hard for a 140 char limit generation of people looking to get internet traffic to a blog while the content is still fresh in people's minds posted before anyone else does it.

Good article is good, it shows brute force works with brute force.

Reply on news.ycombinator.com