Live data from Hacker News

6.5 Million LinkedIn Password Hashes Leaked

translate.google.com

531–540 of 547 posts

Re: 6.5 Million LinkedIn Password Hashes Leaked

#531
post #245

Earlier quoted context omitted.

My complex unique password is also on this list (full hash no 5 0's). So nope, not a hoax. Unbelievable/insulting they didn't even bother to salt.

Do you remember when you first used this password at LinkedIn? It could help narrow the dates of the breach. Especially useful would be the presence of a strong password in the list that was subsequently changed. That might help determine its freshness, if the new password isn't present (although this may be an incomplete list from an ongoing breach).

[deleted]

Re: 6.5 Million LinkedIn Password Hashes Leaked

#532
post #328

Earlier quoted context omitted.

Do you remember when you first used this password at LinkedIn? It could help narrow the dates of the breach. Especially useful would be the presence of a strong password in the list that was subsequently changed. That might help determine its freshness, if the new password isn't present (although this may be an incomplete list from an ongoing breach).

I'm thinking this list is from closer to a year ago, I changed my password shortly after the MtGox hack last year and this hash is for my old password that was compromised during that time period.

My password is in the dump, and it was changed mid October 2010. I remember because I changed all my passwords when my laptop was stolen.

The MtGox hack was in June 2011.

Re: 6.5 Million LinkedIn Password Hashes Leaked

#533
post #529

Earlier quoted context omitted.

I sincerely mean no offense but this statement came directly out of your butt. Read the table on page 14 of Colin Percival's Usenix paper "Stronger Key Derivation Via Sequential Memory-Hard Functions" (which you could have found by Googling [scrypt paper]); PBKDF2 is ~5x faster (ie: costs ~5x less to break) than bcrypt; PBKDF2 and scrypt aren't even in the same ballpark. From exactly where did you derive the idea tha…

All three are extremely good for this use case, when the competition is SHA-1. Beyond that, I don't know enough to compare the three. So yeah, it came out of my butt. If Colin has a paper on it then I trust his comparison. What I really meant to say is what you said: all three are just fine. Also, I thought I remembered my comment's parent saying something stronger, either it was edited later, or I was drunk when I d…

I just wanted to write the word "butt". Thanks for being cool about it. :)

Re: 6.5 Million LinkedIn Password Hashes Leaked

#534
I cross-referenced the leaked hashes against hashes of the 10,000 most common passwords and found that 93% of the passwords at least 6 characters long appear in the leak.

http://www.johnvey.com/blog/2012/06/93-of-top-passwords-appe...

It's always surprising that people are so lackadaisical about their passwords. I've had people tell me their passwords in casual conversation multiple times, just for the sake of discussion.

Re: 6.5 Million LinkedIn Password Hashes Leaked

#535
post #518

Earlier quoted context omitted.

obligatory comments - not portable - useless use of backticks printf password|openssl sha1|cut -c6-40|grep -f - hacked.txt

Why are you extracting 35 characters with 'cut -c6-40'? SHA1 produces a 160-bit message digest. That's 20 bytes or 40 hex-digits.

typo.

Re: 6.5 Million LinkedIn Password Hashes Leaked

#536
post #529

Earlier quoted context omitted.

All three are extremely good for this use case, when the competition is SHA-1. Beyond that, I don't know enough to compare the three. So yeah, it came out of my butt. If Colin has a paper on it then I trust his comparison. What I really meant to say is what you said: all three are just fine. Also, I thought I remembered my comment's parent saying something stronger, either it was edited later, or I was drunk when I d…

I just wanted to write the word "butt". Thanks for being cool about it. :)

hahahaha, well, what you wrote was worthwhile and (as far as I can tell) correct. Thanks.

Re: 6.5 Million LinkedIn Password Hashes Leaked

#537
I deleted my account over 6 months ago but my password hash (strong unique password) is in the file. Either (a) the file retains passwords of deleted accounts, (b) the file was stolen over 6 months ago and LinkedIn didn't know about it, or (c) the file was stolen over 6 months ago and LinkedIn DID know about it and were hoping it wouldn't show up online.

Re: 6.5 Million LinkedIn Password Hashes Leaked

#538
post #461

Earlier quoted context omitted.

Actually, for a large enough list of unsalted password hashes, bruteforcing is faster that rainbow tables: - a rainbow table may require a constant amount of time to reverse 1 hash, but it has to be repeated N times for N passwords. - when bruteforcing, a password candidate can be checked against N hashes in a constant amount of time (look up the candidate hash in a hash table) For example if it takes 10 minutes to l…

true, for extremely large rainbow tables. SHA1 tables are around 20-60GB depending on how large your base character set is. If you shoved all this data into a giant database, query speed is still under a few milliseconds. In general, rainbow tables can be sharded fairly easily, so if your data set is a few hundred terabytes, just split it across a few machines and you'll retain the millisecond query times. Storing an…

What I say is true for any size of rainbow table. It seems you forget that RT lookups require CPU resources in addition to mere I/O resources. There is always a number of hashes beyond which brute forcing them is faster than RTs. Sometimes this number is very high (billions of hashes), sometimes it is lower (thousands of hashes). It depends on many factors: RT chain length, speed of the H() and R() functions, speed of the brute forcing implementation, etc.

To take your example of a small SHA1 rainbow table of 20GB, assuming it has a chain length of 40k, looking up a hash in it will require on average 200M calls to the SHA1 compression function (assuming a successful lookup). A modern CPU core can do about 5M calls per second. Therefore looking up one hash will take at least 40 sec, and looking up these 6.5M LinkedIn hashes would take 8.2 years! (This is just counting CPU time, I assume the RT is loaded in RAM for a negligible I/O access time to its data.) A RT of this size would cover a password space of about 2^44. For comparison a decent GPU can brute force this many hashes concurrently at a speed of roughly 500M per second (see oclhashcat perf numbers on an HD 7970). Covering the same password space would take only 9.8 hours. Compare 8.2 years vs. 9.8 hours: obviously the LinkedIn hashes that have been cracked so far have been brute forced, not looked up in RTs!

And even if you leveraged GPUs to perform RT lookups, they would speed up the computations by roughly a factor 100x, reducing the 8.2 years down to 30 days, still unable to match the short 9.8-hour brute forcing session. (My friend Bitweasil is doing research on GPU-accelerated rainbow tables, see cryptohaze.com)

Re: 6.5 Million LinkedIn Password Hashes Leaked

#539
post #69
post #16

Earlier quoted context omitted.

just use a couple of shitty passwords for sites you don't care about, and remember the other ones. E.g. my hacker news account would probably be relatively unproblematic to compromise. If that were to happen, I'd just make a new one though.

I take things a step further -- I have no idea what my password is on sites like HN or reddit. If the cookie is ever gone, my account is gone. I don't like the idea of identity permanence. Instead of shitty passwords though, why not use something like 1Password to store the logins? I use that (or an old fashioned piece of paper in a secure location) for meaningful security tokens.

Yeah, I actually deliberately make new accounts on reddit and HN every couple of months

Re: 6.5 Million LinkedIn Password Hashes Leaked

#540

Some observations on this file: 0. This is a file of SHA1 hashes of short strings (i.e. passwords). 1. There are 3,521,180 hashes that begin with 00000. I believe that these represent hashes that the hackers have already broken and they have marked them with 00000 to indicate that fact. Evidence for this is that the SHA1 hash of 'password' does not appear in the list, but the same hash with the first five characters…

Nice observation dude, Can u please share the password file I dont have it anywhere. Thanks
Post reply on HN