Live data from Hacker News

Hashcat 6.0

hashcat.net

21–30 of 55 posts

Re: Hashcat 6.0

#23

That's ~5 commits a DAY on average since the last release a year ago, primarily from 29 contributors. That is a rate of development that bests most paid teams that I know of. I am very impressed. How do you manage so much commitment for an open source project?

Security researchers / developers are employed by companies and organizations that have an interest in this technology, e.g. law enforcement, secret services.

I suspect most serious / active open source projects have a number of paid for developers like that. TBH, they need it, if their scale is beyond a small library / utility.

Re: Hashcat 6.0

#24

1800 commits since the last release - that's not the "continuous delivery" ;)

For those that care, it is though - they can do their own builds off the master or develop branch. You're confusing continuous delivery with continuous deployment. Delivery is that your software CAN be deployed at any given point, which is ensured by e.g. a test suite and other checks before something is merged.

Re: Hashcat 6.0

#25
post #21

Earlier quoted context omitted.

it may be suggestive, but it's still a fact

How can something be 'suggestive' and 'a fact' at the same time?

By being true, and suggesting something else.

Obviously non ethical hackers can get paid non ethically. Anyone can get paid non-ethically after all. It's a fact that's so trivial it's useless if you just take it for its factual content. What makes it interesting is the implication that people use hashcat for unethical (and/or illegal) activities and use the proceeds from that to pay for their time improving hashcat. The comment doesn't state that, but it's what we are all thinking when reading it.

Re: Hashcat 6.0

#26

Earlier quoted context omitted.

Maybe don't make unsubstantiated claims without evidence.

it may be suggestive, but it's still a fact

The bare fact is not an answer to the question. It's a non sequitur.

The clear implication that actually answers the question, that these non ethical hackers are responsible for the commitment to the project, is an unsubstantiated claim.

Re: Hashcat 6.0

#28

How many hashes per second can a high end GPU do?

I ran it recently on my 1080ti:

Session..........: hashcat

Status...........: Exhausted

Hash.Type........: MS Office 2010

Hash.Target......: $office$201010000012816*[removed]

Time.Started.....: Sat Apr 18 09:05:24 2020 (3 mins, 35 secs)

Time.Estimated...: Sat Apr 18 09:08:59 2020 (0 secs)

Guess.Base.......: File (merged.txt)

Guess.Queue......: 1/1 (100.00%)

Speed.#1.........: 92589 H/s (2.67ms) @ Accel:256 Loops:128 Thr:64 Vec:1

Recovered........: 0/1 (0.00%) Digests, 0/1 (0.00%) Salts

Progress.........: 19922208/19922208 (100.00%)

Rejected.........: 0/19922208 (0.00%)

Restore.Point....: 19922208/19922208 (100.00%)

Restore.Sub.#1...: Salt:0 Amplifier:0-1 Iteration:99968-100000

Candidates.#1....:

Hardware.Mon.#1..: Temp: 74c Fan: 55% Util: 89% Core:1949MHz Mem:5508MHz Bus:8

Started: Sat Apr 18 09:05:07 2020

Stopped: Sat Apr 18 09:09:00 2020

Re: Hashcat 6.0

#29
post #17
post #10

Is there a Hashcat-as-a-Service or is everyone just renting out EC2 GPU instances by the hour?

Most hashes can be cracked with onlinehashcrack.com -- They are free if its under 8 characters and something like 5$ if its not. You can submit as many as you want and if they don't crack it. its free

Is there something similar for Ethereum presale wallet hashes?

I have a wallet of which I know enough of the password to reduce the space to < 10 chars that need to be guessed.

Re: Hashcat 6.0

#30
post #6

Any way to use Metal instead of OpenCL now?

What's the benefit of Metal in this use case? Are there any noticeable speedups in other brute forcing tools that switched to Apple's proprietary API? Given that OpenCL works on every decent modern platform and GPU brand I doubt much effort will be put into Metal unless someone familiar with the API and willing to put in the extra work joins the team of maintainers or creates a fork.

>What's the benefit of Metal in this use case?

Continued usage on macOS if you care about that kind of a thing since Apple has deprecated OpenCL support.

Post reply on HN