Pete Finnigan's Oracle Security Forum (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
Security In General >> Security >> Online MD5 Hash Database
(Message started by: Pete Finnigan on Aug 22nd, 2005, 8:35am)

Title: Online MD5 Hash Database
Post by Pete Finnigan on Aug 22nd, 2005, 8:35am
On Slashdot I read that there is a MD5 hash database on http://gdataonline.com/ with already more than 12 million entries (spanning 7 languages, 30 topics). With that apparently the average time to crack 5 hashes is now .04 seconds.

Knowing what kind of passwords people usually take (car brands, names of children, names of fruits), it sounds linke a useful tool for hackers.

The Slashdot article:
http://it.slashdot.org/article.pl?sid=05/08/21/1946254&tid=172&tid=95

Title: Re: Online MD5 Hash Database
Post by Pete Finnigan on Aug 22nd, 2005, 3:40pm
Hi Marcel-Jan,

Thanks for the link. This is a qorrying trend for companies as it gets easier and easier to crack passwords. The key issue is that users and others who have passwords still do use dictionary or common words - or munged versions of them.

At least this MD5 database cannot be used to crack Oracle database passwords.

Thanks again

cheers

Pete



Powered by YaBB 1 Gold - SP 1.4!
Forum software copyright 2000-2004 Yet another Bulletin Board