kmartburrito comments on 60% of MD5 password hashes are crackable in under an hour

Privacy

6,326 readers

1,648 active

10 users here now

Welcome! This is a community for all those who are interested in protecting their privacy.

Rules

PS: Don't be a smartass and try to game the system, we'll know if you're breaking the rules when we see it!

Be civil and no prejudice
Don't promote big-tech software
No apathy and defeatism for privacy (i.e. "They already have my data, why bother?")
No reposting of news that was already posted
No crypto, blockchain, NFTs
No Xitter links (if absolutely necessary, use xcancel)

Related communities:

Some of these are only vaguely related, but great communities.

founded 2 years ago

moderators

[–] kmartburrito@lemmy.world 20 points 6 months ago* (5 children)

That's why they need a little bit of seasoning. Some salt would do the trick. At least it would help with a dictionary/rainbow table based attack anyway

permalink

fedilink

source

hideshow 5 child comments

[–] e0qdk@reddthat.com 15 points 6 months ago (4 children)

Yep, salt. Also, there are much better options than MD5. I used bcrypt in systems I built a while back. There's also scrypt and argon2, which are newer. (Just be careful that you don't create a DoS vulnerability while hardening your login system...)

permalink

fedilink

source

parent

hideshow 4 child comments