Is it supposed to be obvious where this #Merveilles community with its icons is on the web? Am I unaware of a whole type of communities like this?
[deleted]
Bruteforcing the Devil
11–20 of 29 posts
Re: Bruteforcing the Devil
#12I came up with a mutation-based solution to this. Supply any string and it finds a valid hash in as few edits as possible.
Example: http://bochs.info/img/mutation-20140606-024906.png
One could definitely optimize this to be less destructive and produce more pronounceable results. It's basically two pieces: an engine for suggesting mutations, and a simple algorithm to score and pick mutations. Changes to either half (vowel distribution, ngrams, etc) could result in better strings.
(fyi, this kind of attack is a big reason to use cryptographic hashes: http://en.wikipedia.org/wiki/Cryptographic_hash_function)
Re: Bruteforcing the Devil
#13Oh, the joys of generating a recognizable tripcode.
Re: Bruteforcing the Devil
#14WOW my C++ solution is horrible. It's as though I'd just ignored everything I've learned about Doing Things Right in C++ Post 2010. Such is hacking, I guess.
Re: Bruteforcing the Devil
#15Aw guys, don't go start posting on their site (which I won't link) with devil names. Everyone knows communities turn to shit when they get too big and 300 different users posting all with blank icons is going to kill the fun for them. I'm not even a member of Merveilles but that makes me sad for them.
I don't think it's going to be a problem. Before anyone can post anything to merveill.es, they have to figure out how the heck anyone posts anything to merveill.es, which will take some lateral thinking.
Re: Bruteforcing the Devil
#16WOW my C++ solution is horrible. It's as though I'd just ignored everything I've learned about Doing Things Right in C++ Post 2010. Such is hacking, I guess.
[deleted]
Re: Bruteforcing the Devil
#17I think shoruzorhorheugogeuzudeazaeon actually sounds a bit more like a demon than the other candidates.
Damn. HN usernames have to be 15 characters or less. :(
Re: Bruteforcing the Devil
#18i was intrigued by this, so i done it in C.
on my 4-core MBP (2.6ghz ivy bridge) i can manage ~1.8 billion hashes per second.
i could parallelize with OpenCL, but i think this is enough. after a few minutes, i get ARbyhlf as a valid name (although i don't know if this is actually valid.. but it definitely might be)
(removed)
edit: just realised that my nonce calculation was wrong.. http://pastebin.com/bcHcECPJ
Re: Bruteforcing the Devil
#19This hash is very weak. You can actually find many preimages of a given hash value in seconds with a meet-in-the-middle attack: https://gist.github.com/pedrox/eb8d674bf2b8be63da0f
Re: Bruteforcing the Devil
#20 I’m half tempted to buy a few hours of highcpu AWS compute power and get
it done nowish instead ... I set myself a $50 spending limit, which
gave me about 24 hours of compute on an instance with 32 virtual cores
You could get 178 hours of compute for your $50 budget.