Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MtGox salted passwords cracked

pastebin.com

Post reply on HN
Print view View original

1–10 of 97 posts

Re: MtGox salted passwords cracked

#3

Post by flexd »

What you mean is that the ridiculously easy passwords have been cracked? Not really a surprise considering they have been out for so long.

While I'm glad I do not have a account there they would not have been able to crack my password :-)

Edit:

I am a fool, salted hashes are probably not in anyones rainbow tables :)

Re: MtGox salted passwords cracked

#4

Post by thaumaturgy »

meric wrote: post #2

Hmm it isn't complete; My password isn't on there yet. =\

Well, considering that 292 of the passwords contain mixed case, 79 of them are 12 characters or more (this one's nice: "qwe123QWE!@#"), 59 of them contain non-alphanumeric characters, and 6713 of the 8655 passwords posted are unique ... it's probably only a matter of time.

Nice. I think it's time to upgrade all my passwords.

Re: MtGox salted passwords cracked

#5

Post by cipherpunk »

flexd wrote: post #3

What you mean is that the ridiculously easy passwords have been cracked? Not really a surprise considering they have been out for so long. While I'm glad I do not have a account there they would not have been able to crack my password :-) Edit: I am a fool, salted hashes are probably not in anyones rainbow tables :)

Rainbow tables do not exist for randomised salts.

Re: MtGox salted passwords cracked

#6

Post by doublec »

thaumaturgy wrote: post #4
meric wrote: post #2

Hmm it isn't complete; My password isn't on there yet. =\

Well, considering that 292 of the passwords contain mixed case, 79 of them are 12 characters or more (this one's nice: "qwe123QWE!@#"), 59 of them contain non-alphanumeric characters, and 6713 of the 8655 passwords posted are unique ... it's probably only a matter of time. Nice. I think it's time to upgrade all my passwords.

"qwe123QWE!@#" is only nice until you look at the keyboard. First three qwerty letters. First three keys just above them. Then the same shifted.

Re: MtGox salted passwords cracked

#8

Post by flexd »

cipherpunk wrote: post #5
flexd wrote: post #3

What you mean is that the ridiculously easy passwords have been cracked? Not really a surprise considering they have been out for so long. While I'm glad I do not have a account there they would not have been able to crack my password :-) Edit: I am a fool, salted hashes are probably not in anyones rainbow tables :)

Rainbow tables do not exist for randomised salts.

Err, now I feel (more) stupid. Anyway my point being those passwords are not exactly the strongest.

Re: MtGox salted passwords cracked

#9

Post by thaumaturgy »

doublec wrote: post #6
thaumaturgy wrote: post #4

Earlier quoted context omitted.

Well, considering that 292 of the passwords contain mixed case, 79 of them are 12 characters or more (this one's nice: "qwe123QWE!@#"), 59 of them contain non-alphanumeric characters, and 6713 of the 8655 passwords posted are unique ... it's probably only a matter of time. Nice. I think it's time to upgrade all my passwords.

"qwe123QWE!@#" is only nice until you look at the keyboard. First three qwerty letters. First three keys just above them. Then the same shifted.

Yeah, I caught that but it's still decent at meeting the usual password requirements, and it's almost as arbitrary as any other keyboard pattern.

Re: MtGox salted passwords cracked

#10

Post by meric »

cipherpunk wrote: post #5
flexd wrote: post #3

What you mean is that the ridiculously easy passwords have been cracked? Not really a surprise considering they have been out for so long. While I'm glad I do not have a account there they would not have been able to crack my password :-) Edit: I am a fool, salted hashes are probably not in anyones rainbow tables :)

Rainbow tables do not exist for randomised salts.

But if the salt is global and its value is "1", it might.
Post reply on HN