Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Mark Zuckerberg's Twitter and Pinterest password was 'dadada'

theregister.co.uk

Post reply on HN
Print view View original

21–30 of 58 posts

Re: Mark Zuckerberg's Twitter and Pinterest password was 'dadada'

#21

Post by phpnode »

mevile wrote: post #14
benmmurphy wrote: post #3

Earlier quoted context omitted.

It means passwords like dadada can be reversed from hashes.

It's not exactly happening in a vacuum. Emails and usernames from previous dumps help people figure out passwords for new accounts when many people are reusing the same silly password everywhere. For example someone else may have had dadada as a password and isuckat@passwords.com as their email, and their password was discovered via a separate breach on some other site. That other site used shit technology for securi…

It bothered me more than it should have that you used isuckat@passwords.com instead of isuck@passwords.com for your example :)

Re: Mark Zuckerberg's Twitter and Pinterest password was 'dadada'

#22

Post by EGreg »

reitanqild wrote: post #16
EGreg wrote: post #10

Earlier quoted context omitted.

Can you prevent targeted attacks, or is salting the state of the art? What if the salt was derived from a key the user had to supply and wasn't stored anywhere?

> What if the salt was derived from a key the user had to supply and wasn't stored anywhere? If I understood you that is the same as demanding the user to input two strings for password authentication, one for salt and one for password, in which case you might just as well require the user to use a longer password.

Good point. Why do we have passwords anyway? Just to authenticate at unanticipated access points? We could always just do two-factor authentication for that. A code would be sent to Google Authenticator on your phone or something like that, encrypted with your public key, and you'd just decrypt it with your private key. The phone would be secured with your password or fingerprint, which is never sent anywhere. The code would allow you to auth with the new access point. If the cellphone was connected to the internet, it could send the key directly and the site would log you in. If not connected to the net, it could use bluetooth or optical or sound to communicate with the access point (eg web browser running on a computer) to send the code. Only in the worst case would you have to type anything in yourself.

Since most people walk around with their cellphones, you could even precompute a couple keys to unlock a site, for those times when there is no internet connection. Of course, your phone should be secured with a password and you should be able to revoke the keys if anything gets lost.

Re: Mark Zuckerberg's Twitter and Pinterest password was 'dadada'

#23

Post by ManlyBread »

continuations wrote: post #6
misterrobot wrote: post #5

Earlier quoted context omitted.

It wasn't salted, but even then a targeted effort could almost certainly crack a password as bad as dadada almost immediately for a fast hash like sha1.

That's what I find hard to believe though. LinkedIn, a $20B giant, doesn't salt its passwords and uses something as weak as sha1? I would expect even a 1-person startup to do better than that.

In 2003, when linkedin was founded SHA1 probably made sense. GPU password cracking was mostly non-existent at this point and most machines had a single core processor.

Re: Mark Zuckerberg's Twitter and Pinterest password was 'dadada'

#25

Post by tim333 »

EGreg wrote: post #10
phpnode wrote: post #7

Earlier quoted context omitted.

That doesn't need to be true for this to have happened. Zuck is a high profile target, probably the hackers just prioritised cracking his account and such a weak password would be found reasonably quickly even using bcrypt

Can you prevent targeted attacks, or is salting the state of the art? What if the salt was derived from a key the user had to supply and wasn't stored anywhere?

You can hash something like password+email+salt. If they don't know the email or salt it makes it hard to crack and even if they do it slows things down as they have to crack each password individually rather than making a rainbow table. Also using a slower hash like bcrypt rather than sha1 helps slow things down.

Re: Mark Zuckerberg's Twitter and Pinterest password was 'dadada'

#26

Post by mevile »

phpnode wrote: post #21
mevile wrote: post #14

Earlier quoted context omitted.

It's not exactly happening in a vacuum. Emails and usernames from previous dumps help people figure out passwords for new accounts when many people are reusing the same silly password everywhere. For example someone else may have had dadada as a password and isuckat@passwords.com as their email, and their password was discovered via a separate breach on some other site. That other site used shit technology for securi…

It bothered me more than it should have that you used isuckat@passwords.com instead of isuck@passwords.com for your example :)

Oh god. I'm so sorry. :(

Re: Mark Zuckerberg's Twitter and Pinterest password was 'dadada'

#27

Post by jdmichal »

EGreg wrote: post #10
phpnode wrote: post #7

Earlier quoted context omitted.

That doesn't need to be true for this to have happened. Zuck is a high profile target, probably the hackers just prioritised cracking his account and such a weak password would be found reasonably quickly even using bcrypt

Can you prevent targeted attacks, or is salting the state of the art? What if the salt was derived from a key the user had to supply and wasn't stored anywhere?

Salting has zero effect on the targeted cracking of a single password. Salting protects against rainbow tables - sets of pre-calculated hashes plain-text to passwords. These are dangerous because an attacker has a large amount of time to pre-calculate hashes, but (hopefully) only a small amount of time to calculate after a dump before the password is changed. However, if you are starting from scratch and have a single password to crack, there's no difference between a salted and unsalted password.

Modern state of the art for targeted attacks is to use slow hash algorithms, such as bcrypt. They have little effect on normal operations, as most users will get the right password within a few tries, so you're adding a negligible amount of time per user. But the extra time has a huge effect when an attacker is trying to calculate millions of hashes for a single user.

Re: Mark Zuckerberg's Twitter and Pinterest password was 'dadada'

#29

Post by EGreg »

jdmichal wrote: post #27
EGreg wrote: post #10

Earlier quoted context omitted.

Can you prevent targeted attacks, or is salting the state of the art? What if the salt was derived from a key the user had to supply and wasn't stored anywhere?

Salting has zero effect on the targeted cracking of a single password. Salting protects against rainbow tables - sets of pre-calculated hashes plain-text to passwords. These are dangerous because an attacker has a large amount of time to pre-calculate hashes, but (hopefully) only a small amount of time to calculate after a dump before the password is changed. However, if you are starting from scratch and have a singl…

Just out of curiosity, how is sha composed with itself 1023 times worse than bcrypt? Is it because bcrypt is also memory bound?
Post reply on HN