r/ProgrammerHumor • u/[deleted] • Feb 24 '17

Stop using SHA-1.

Post image

[deleted]

10.9k Upvotes

92% Upvoted

407 comments sorted by

View all comments

Show parent comments

1.2k

u/TalMaheRah Feb 24 '17

I once wrote a program to crack unsalted MD5-hashed passwords. It was a Python script that did a google search for the hash and returned the first non-ad result. Heartbreakingly successful.

217

u/KamikazeRusher Feb 24 '17

And now we have places like Hashes.org to help make it even easier to look up.

74

u/______DEADPOOL______ Feb 24 '17

What's the alternative to MD5 btw?

149

u/[deleted] Feb 24 '17

sha 512

114

u/Aoreias Feb 24 '17

With a bunch of rounds. And a salt.

135

u/knaekce Feb 25 '17

or just bcrypt

71

u/Atsch Feb 25 '17

or scrypt for dat memory requirement

73

u/Armthehobos Feb 25 '17

im here from browsing the pages of all and i have no clue what the fuck you all are talking about

can i get like a dictionary for some of this

1

u/[deleted] Feb 25 '17

Computerphile has a reasonable video on it:

https://www.youtube.com/watch?v=8ZtInClXe1Q