I wonder what happens to all of the old cards that are replaced every generation? Would be nice to snag a couple of those off of eBay.
They're there and unbelievably cheap. Just wait for the inevitable death of GPU mining again.
Password Cracking with 8x Nvidia GTX 1080 Ti GPUs
91–100 of 113 posts
Re: Password Cracking with 8x Nvidia GTX 1080 Ti GPUs
#92Earlier quoted context omitted.
"At a current market value of about USD$0.22 per coin" wow
The regret I feel having given away all of my 100 bitcoins at that price point will forever haunt me.
How would you cash out on a huge BTC gain? What would happen if you sold say $500,000 worth at an exchange, then had them wire that to your bank account? Let's say no account in your name ever had a monthly deposit total greater than $10,000 and suddenly that shows up. Would you be under investigation by several organizations? Would you be flagged for audit every year for the rest of your life?
Re: Password Cracking with 8x Nvidia GTX 1080 Ti GPUs
#93In 2010 I built an 8-GPU machine[1] (4 dual-GPU AMD HD5970) and wrote an MD5 bruteforcer (then faster than hashcat), doing 28.6 then 33.1 billion passwd hashes/sec with a software optimization: http://blog.zorinaq.com/whitepixel-breaks-286-billion-passwo... It's interesting to note that 6.5 years later a single GPU like the Nvidia 1080 Ti can match the whole 2010 machine (32 billion hashes/sec). This is a doubling of…
> Moore's Law is still alive and kicking (contrary to what many claim)! In GPUs, which is why tech that can take advantage of parallel processing such as Deep Learning, AR or coin mining has a bright future, whereas the rest is slowly falling into standardized oblivion with low-paying jobs.
A different way to look at it might be that there are fewer applications that can benefit from higher speed that can't be parallelized. 2x speedup on your CPU gives you what exactly? And at 64gb of ram, I don't need 128gb unless I'm moving into HPC territory. Consumer PC hardware is good enough and everything new people want to see has to do with flashy graphics in low-power small-form-factor devices (or people want decisions made for them in what turn out to be computationally intensive ways).
As you point out, graphics, deep learning, AR, and others can benefit from increased computational power. Therefore, we're seeing Moore's Law (which didn't start with Moore) appear where that increased compute ability can be most readily applied.
Meanwhile, when an exciting new technology appears, there are always a small group of people that have the required expertise. With IT, young brains are able to learn these new skills incredibly quickly, so markets respond very quickly. From what I've seen, there's usually an overshooting effect where people think "there's a future in X" for longer than they should. Maybe school is to blame. But basically, you have a ton of new entrants to the market, and they fill demand, but demand levels off sooner or later, and that leads to the low-paying oblivion you're talking about.
I point all this out because there's nothing magic about deep learning, AR, etc. They may not be high paying niches for long. And already, the most-reliable/highest-paying opportunities seem to be working in small groups serving defined markets.
Re: Password Cracking with 8x Nvidia GTX 1080 Ti GPUs
#94as with most really high electrical loads, if you can operate it remotely, do so. There's places in North America near major hydroelectric dams with electricity that costs $0.03 to $0.045 per kWh. Running something like this and the cooling needed for a 3kW thermal load on California electrical prices is a good way to burn money.
Quebec and Manitoba have rates as low as 0.03$CAD/kWh (~0.023 $USD), or about 0.07$USD/hr for this gpgpu system. Servethehome is including colocation rental costs (which also means colocation power cost, typically 3x utility markup) in their cost-per-hour estimate here.
British Columbia is also 92% hydro but more expensive at 0.08$CAD/kWh to 0.12$CAD/kWh
Re: Password Cracking with 8x Nvidia GTX 1080 Ti GPUs
#95In 2010 I built an 8-GPU machine[1] (4 dual-GPU AMD HD5970) and wrote an MD5 bruteforcer (then faster than hashcat), doing 28.6 then 33.1 billion passwd hashes/sec with a software optimization: http://blog.zorinaq.com/whitepixel-breaks-286-billion-passwo... It's interesting to note that 6.5 years later a single GPU like the Nvidia 1080 Ti can match the whole 2010 machine (32 billion hashes/sec). This is a doubling of…
> Moore's Law is still alive and kicking (contrary to what many claim)! That statement is so often misunderstood, in multiple ways. First off, Moore's Law isn't technically about performance increases. It's about doubling of transistors every 2 years on the same die space. We still got that on CPUs until very recently, even though CPU performance has stopped doubling every 2 years like 15 years ago. But now even the…
>> And the reason for this is because GPUs pretty much scale with number of cores.
>> It doesn't work like that for CPUs, and it hasn't for like 15 years.
It's more the workload than anything - CPUs scale very well with the right tasks. Nobody gives GPUs the 'wrong tasks' that don't scale
Re: Password Cracking with 8x Nvidia GTX 1080 Ti GPUs
#96Earlier quoted context omitted.
Quebec and Manitoba have rates as low as 0.03$CAD/kWh (~0.023 $USD), or about 0.07$USD/hr for this gpgpu system. Servethehome is including colocation rental costs (which also means colocation power cost, typically 3x utility markup) in their cost-per-hour estimate here.
quebec hydro is a huge reason for the location of the OVH datacenter there. margins are thin in the massive bulk hosting/colo/dedicated server business. http://www.datacenterknowledge.com/archives/2013/01/17/ovhs-...
Actually they buy supply from the hydro dam which is right beside them, at 125,000 volts they have their own substations.
There is also a windfarm about 10 minutes from there, and they also have access to the regular hydro quebec power grid.
That location in beauharnois was very strategic... cheap land, hydro dam right beside, near the hydro quebec main transmission line for US interconnect... only thing they were missing was fiber but they brought it in.
Re: Password Cracking with 8x Nvidia GTX 1080 Ti GPUs
#97Earlier quoted context omitted.
Process of elimination restricts character and symbol sets, generally, narrowing your set of possible combinations greatly. The best way to crack a password isn't to brute-force it first, it's to first analyze who made the password, and the password system, to narrow down all possibilities before you try brute-forcing. Example; if a person is American, you can pretty much assume they're restricted to the typical US k…
I believe the poster upthread already considered only restricted characters (upper + lower + digits), so the difficulty they stated is what remains after your analysis. > Man can make it, man can break it, there is simply no exception. Nice platitude, but this is simply not true.
"Nice platitude, but this is simply not true."
You got an example of anything man has made that man has not broken?
"I believe the poster upthread already considered only restricted characters (upper + lower + digits), so the difficulty they stated is what remains after your analysis."
No it's not, because they didn't think of things like password truncation (which my bank annoyingly does) and various other things.
I tested it. It took me almost an hour to crack my chosen mixed-character + symbol 15 character password with a GTX970 implementing the few rules I stated above. Howsecureismypassword.net says it would take a computer 16 BILLION years to crack.
My point very firmly stands.
Re: Password Cracking with 8x Nvidia GTX 1080 Ti GPUs
#98Earlier quoted context omitted.
As a non-infosec guy, could someone shed more light on the implications for end users? I get that the combination of password reuse, short passwords and the fact that some services store passwords in plain text or as MD5 hashes makes it easy to break into accounts once a single service is compromised. So my takeaway is not to use longer passwords, but to use a password manager and have unique passwords for every serv…
I'm personally convinced 8 chars is now too short to be safe, and I suspect real attacks are generally much faster than 8 hours for a password of that length. Using a password manager to generate random passwords you get a way to be impervious to dictionary attacks, in addition to being able to generate and manage longer passwords. I'm generally using 20 char passwords, and I'd turn it up further if there weren't so…
Agreed that long passwords are generally better.
For online services (e.g., HackerNews), what's the scenario where an attacker cracks an 8 character password in 8 hours? I assume the attacker would need to download a copy of the service's password store and in that case the service has been hacked to a degree that the attacker won't need to crack passwords anymore.
Re: Password Cracking with 8x Nvidia GTX 1080 Ti GPUs
#99Earlier quoted context omitted.
The regret I feel having given away all of my 100 bitcoins at that price point will forever haunt me.
How would you cash out on a huge BTC gain? What would happen if you sold say $500,000 worth at an exchange, then had them wire that to your bank account? Let's say no account in your name ever had a monthly deposit total greater than $10,000 and suddenly that shows up. Would you be under investigation by several organizations? Would you be flagged for audit every year for the rest of your life?
Your bank might be worried, but if you use a 'reputable' exchange that does KYC/AML, e.g. GDAX or Gemini, it should be alright. You might want to space out the bank transfers.
As for the tax man, declare the capital gains and you'll be right as rain.
Re: Password Cracking with 8x Nvidia GTX 1080 Ti GPUs
#100Earlier quoted context omitted.
In order of importance: 1) Don't use a really bad password like 'password'. This one is the most important because it might allow an attacker to compromise your accounts online--that is without compromising the site itself. 2) Use a different password for each site. This one is important because you don't want a compromise of smallvillelittleleague.org, which stores its passwords in plaintext, to mean that an attacke…
> 4) Use very strong passwords everywhere (i.e. long randomly generated). You can also go the route of using passwords like: MyEmailIsFromGmail! or HackerNews?MoreLikeSlackerNews
Note that HackerNews?MoreLikeSlackerNews has much less entropy than j-9yh`qw#j54-JIR$