Pete Finnigan's Oracle Security Forum


    
      
        Pete Finnigan's Oracle Security Forum
        (http://www.petefinnigan.com/forum/yabb/YaBB.cgi)
      

        Security In General >> Security >> Online MD5 Hash Database
        
(Message started by: Pete Finnigan on Aug 22^nd, 2005, 8:35am)

Title: Online MD5 Hash Database
Post by Pete Finnigan on Aug 22^nd, 2005, 8:35am

On Slashdot I read that there is a MD5 hash database on gdataonline.com - (broken link) with already more than 12 million entries (spanning 7 languages, 30 topics). With that apparently the average time to crack 5 hashes is now .04 seconds.

Knowing what kind of passwords people usually take (car brands, names of children, names of fruits), it sounds linke a useful tool for hackers.

The Slashdot article:
http://it.slashdot.org/article.pl?sid=05/08/21/1946254&tid=172&tid=95

Title: Re: Online MD5 Hash Database
Post by Pete Finnigan on Aug 22^nd, 2005, 3:40pm

Hi Marcel-Jan,

Thanks for the link. This is a qorrying trend for companies as it gets easier and easier to crack passwords. The key issue is that users and others who have passwords still do use dictionary or common words - or munged versions of them.

At least this MD5 database cannot be used to crack Oracle database passwords.

Thanks again

cheers

Pete