Earlier quoted context omitted.
I bruteforced a 4-digit 2FA in 2 days, of course with the help of a small script instead of trying it myself. It's always fun to see dumb solutions work.
if it works, it's not a dumb solution :)
Tourist's lucky guess cracks safe code on first try
61–70 of 118 posts
Re: Tourist's lucky guess cracks safe code on first try
#62If the combination does allow for wiggle room and the 1 in 8000 figure is correct, the code could have been brute forced in a couple hours. Source: my wife has a habit of forgetting the combination to her 3 digit luggage lock and I had to brute force it a few times (it's surprisingly quick, about 15 minutes) :)
The good thing about normal combination locks is that you can try all combinations sequentially with minimum movement. 000 start 001 1 move 002 1 move ... 008 1 move 009 1 move 019 1 move 018 1 move ... 011 1 move 010 1 move 020 1 move 021 1 move ... and so on.
For electronic locks, there is a similar method that allows you to try a 4-digit code for each key press [1].
[0] https://en.wikipedia.org/wiki/Gray_code [1] http://alvaray.org/brute-forcing-pincode-keypads-using-combi...
Re: Tourist's lucky guess cracks safe code on first try
#63> "They have no value really, but they are of great interest to us. It gives us a little bit of idea of what the places were like in 1977, '78," said Mr Kibblewhite. This must be the most American thing ever. 40 year old stuff treated like they're ancient.
>This must be the most American thing ever. Guys, who's going to be the one to tell him?
Guys, who's going to be the one to tell him ?
Re: Tourist's lucky guess cracks safe code on first try
#64> "They have no value really, but they are of great interest to us. It gives us a little bit of idea of what the places were like in 1977, '78," said Mr Kibblewhite. This must be the most American thing ever. 40 year old stuff treated like they're ancient.
Re: Tourist's lucky guess cracks safe code on first try
#65> "They have no value really, but they are of great interest to us. It gives us a little bit of idea of what the places were like in 1977, '78," said Mr Kibblewhite. This must be the most American thing ever. 40 year old stuff treated like they're ancient.
Re: Tourist's lucky guess cracks safe code on first try
#66Re: Tourist's lucky guess cracks safe code on first try
#67Earlier quoted context omitted.
The good thing about normal combination locks is that you can try all combinations sequentially with minimum movement. 000 start 001 1 move 002 1 move ... 008 1 move 009 1 move 019 1 move 018 1 move ... 011 1 move 010 1 move 020 1 move 021 1 move ... and so on.
I feel like saving 1 move in 10 (9 to 10 is 2 moves, 10 to 11 is back to 1 move) is not worth the mental capacity required to remember current up/down direction. Easier to let the muscles do the work and let your mind wonder.
Re: Tourist's lucky guess cracks safe code on first try
#68Earlier quoted context omitted.
The good thing about normal combination locks is that you can try all combinations sequentially with minimum movement. 000 start 001 1 move 002 1 move ... 008 1 move 009 1 move 019 1 move 018 1 move ... 011 1 move 010 1 move 020 1 move 021 1 move ... and so on.
That sounds similar to the concept of Gray code [0]. For electronic locks, there is a similar method that allows you to try a 4-digit code for each key press [1]. [0] https://en.wikipedia.org/wiki/Gray_code [1] http://alvaray.org/brute-forcing-pincode-keypads-using-combi...
Those "try all n in shortest combination" sequences are called De Bruijn sequences in general.
Re: Tourist's lucky guess cracks safe code on first try
#69> "They have no value really, but they are of great interest to us. It gives us a little bit of idea of what the places were like in 1977, '78," said Mr Kibblewhite. This must be the most American thing ever. 40 year old stuff treated like they're ancient.
Re: Tourist's lucky guess cracks safe code on first try
#70Earlier quoted context omitted.
>This must be the most American thing ever. Guys, who's going to be the one to tell him?
I’m sure the Canadians will be here shortly to correct him.