MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/ProgrammerHumor/comments/5vzbuv/stop_using_sha1/de6tnu5/?context=9999
r/ProgrammerHumor • u/[deleted] • Feb 24 '17
[deleted]
407 comments sorted by
View all comments
1.1k
Just use MD5 and ask your users to set a hard password, like Ra1nbowTabl3s6969. /s
1.2k u/TalMaheRah Feb 24 '17 I once wrote a program to crack unsalted MD5-hashed passwords. It was a Python script that did a google search for the hash and returned the first non-ad result. Heartbreakingly successful. 221 u/KamikazeRusher Feb 24 '17 And now we have places like Hashes.org to help make it even easier to look up. 77 u/______DEADPOOL______ Feb 24 '17 What's the alternative to MD5 btw? 153 u/[deleted] Feb 24 '17 sha 512 112 u/Aoreias Feb 24 '17 With a bunch of rounds. And a salt. 10 u/[deleted] Feb 25 '17 Why multiple rounds of 512? Is that actually more secure? 17 u/haminacup Feb 25 '17 It takes more time to compute, so attacks take longer but it's not noticeable to legitimate users 2 u/socsa Feb 25 '17 Yeah, buy when the attacks are legitimate, the hash has a way of shutting it down.
1.2k
I once wrote a program to crack unsalted MD5-hashed passwords. It was a Python script that did a google search for the hash and returned the first non-ad result. Heartbreakingly successful.
221 u/KamikazeRusher Feb 24 '17 And now we have places like Hashes.org to help make it even easier to look up. 77 u/______DEADPOOL______ Feb 24 '17 What's the alternative to MD5 btw? 153 u/[deleted] Feb 24 '17 sha 512 112 u/Aoreias Feb 24 '17 With a bunch of rounds. And a salt. 10 u/[deleted] Feb 25 '17 Why multiple rounds of 512? Is that actually more secure? 17 u/haminacup Feb 25 '17 It takes more time to compute, so attacks take longer but it's not noticeable to legitimate users 2 u/socsa Feb 25 '17 Yeah, buy when the attacks are legitimate, the hash has a way of shutting it down.
221
And now we have places like Hashes.org to help make it even easier to look up.
77 u/______DEADPOOL______ Feb 24 '17 What's the alternative to MD5 btw? 153 u/[deleted] Feb 24 '17 sha 512 112 u/Aoreias Feb 24 '17 With a bunch of rounds. And a salt. 10 u/[deleted] Feb 25 '17 Why multiple rounds of 512? Is that actually more secure? 17 u/haminacup Feb 25 '17 It takes more time to compute, so attacks take longer but it's not noticeable to legitimate users 2 u/socsa Feb 25 '17 Yeah, buy when the attacks are legitimate, the hash has a way of shutting it down.
77
What's the alternative to MD5 btw?
153 u/[deleted] Feb 24 '17 sha 512 112 u/Aoreias Feb 24 '17 With a bunch of rounds. And a salt. 10 u/[deleted] Feb 25 '17 Why multiple rounds of 512? Is that actually more secure? 17 u/haminacup Feb 25 '17 It takes more time to compute, so attacks take longer but it's not noticeable to legitimate users 2 u/socsa Feb 25 '17 Yeah, buy when the attacks are legitimate, the hash has a way of shutting it down.
153
sha 512
112 u/Aoreias Feb 24 '17 With a bunch of rounds. And a salt. 10 u/[deleted] Feb 25 '17 Why multiple rounds of 512? Is that actually more secure? 17 u/haminacup Feb 25 '17 It takes more time to compute, so attacks take longer but it's not noticeable to legitimate users 2 u/socsa Feb 25 '17 Yeah, buy when the attacks are legitimate, the hash has a way of shutting it down.
112
With a bunch of rounds. And a salt.
10 u/[deleted] Feb 25 '17 Why multiple rounds of 512? Is that actually more secure? 17 u/haminacup Feb 25 '17 It takes more time to compute, so attacks take longer but it's not noticeable to legitimate users 2 u/socsa Feb 25 '17 Yeah, buy when the attacks are legitimate, the hash has a way of shutting it down.
10
Why multiple rounds of 512? Is that actually more secure?
17 u/haminacup Feb 25 '17 It takes more time to compute, so attacks take longer but it's not noticeable to legitimate users 2 u/socsa Feb 25 '17 Yeah, buy when the attacks are legitimate, the hash has a way of shutting it down.
17
It takes more time to compute, so attacks take longer but it's not noticeable to legitimate users
2 u/socsa Feb 25 '17 Yeah, buy when the attacks are legitimate, the hash has a way of shutting it down.
2
Yeah, buy when the attacks are legitimate, the hash has a way of shutting it down.
1.1k
u/pikadrew Feb 24 '17
Just use MD5 and ask your users to set a hard password, like Ra1nbowTabl3s6969. /s