u/cbkrunch17in r/compsci • Recommends
On “How to show how unsafe weak passwords are.”
link to this video
0:00 / 0:00
#passwordcracking#hashcat#sha-512
Password Cracking - Computerphile
Computerphile
2.6M subscribers • 70 videos on Hallway
- Recommended by 1 person: 1 in engineering communities.
- Presented by Dr. Mike Pound, University of Nottingham
Beginner. No background in the topic needed.
3.5M views10 years ago1 recommendation
SecurityCryptographyExploits and vulnerabilitiesWeb and application security
Dr. Mike Pound demonstrates how password cracking works using high-performance GPUs and explains the importance of strong hashing algorithms.
'Beast' cracks billions of passwords a second, Dr Mike Pound demonstrates why you should probably change your passwords... Please note,at one point during the video Mike suggests using SHA512. Please check whatever the recommended process is at the time you view the video. Here's a look at 'Beast': youtube.com/watch?v=RG2Z7Xgthb4 How NOT to Store Passwords: youtu.be/8ZtInClXe1Q Password Choice: youtu.be/3NjQ9b3pgIg Deep Learning: youtu.be/l42lr8AlrHk Cookie Stealing: youtu.be/T1QEs3mdJoc facebook.com/computerphile twitter.com/computer_phile This video was filmed and edited by Sean Riley. Computer Science at the University of Nottingham: bit.ly/nottscomputer Computerphile is a sister project to Brady Haran's Numberphile. More at bradyharan.comWhy it's here
1 person recommends thisWhat people say. Recommended as a clear demonstration of how easily weak passwords can be cracked.
Moments people linked to
Sebastian Norron Information Security Stack Exchange • Mentions
is there any defense against this kind of attack?
link to this video
I know someone who uses a password encryption hashing that generates the same length of keys as in this video and it makes me worried that those keys are equally vulnerable? (I don't know what kind of encryption hashing is used, nor do I want to know)
*Does it help to increase the length of the encrypted hashed keys?*
As I understand the attack:
The attacker have somehow got a hold of the encrypted hashed keys, and also downloaded a big database of already cracked passwords & also downloaded some (or made own) rules for switching letters (a "mutator").
Then the attacker takes a solved password, mutates the password in al…