Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Passwordle

rsk0315.github.io

Post reply on HN
Print view View original

131–140 of 263 posts

Re: Passwordle

#131

Post by [deleted] »

mlyle wrote: post #107
moritonal wrote: post #7

There is like... four people I know I could send this to who'd laugh, it's so niche. Yet I also laughed out loud when I got how conventionally impossible it is.

Is it? 6 guesses and I have 14 hex digits (56 bits) of the hash, along with knowing the population counts for all the numbers. This is enough to run a password cracker and determine the plaintext if it's a readily guessed password. Sure, it breaks conventional use of rainbow tables, etc, but... edit: Eh, 14 characters. OK, that's pretty resistant to anything other than debugging.

[deleted]

Re: Passwordle

#132

Post by enkid »

residualmind wrote: post #124
thewakalix wrote: post #121

Earlier quoted context omitted.

The correct password is impossible to calculate from the given data, but it seems like it should be possible to check whether a password matches the data.

Yeah because the algo is known, it is SHA256. The thing is you don't know the length of the password. It could be more than the number of hydrogen atoms in the universe, or 12. You still have to brute force or look up one possible solution (or collision thereof). The whole thing just shows that a hash makes ZERO applicable inferable assertions about the message (password). Thats the definition of evenly distributed h…

I mean, anything past 256 bits is going to have a collision, so that doesn't matter, but you're right that the entire point of a hash is that even if you know the hash, it's very very hard to find what the plaintext is.

Re: Passwordle

#133

Post by [deleted] »

therein wrote: post #100
umvi wrote: post #82

Earlier quoted context omitted.

TIL there's a "debugger" keyword[0] in JavaScript that auto-sets a breakpoint at that line. [0] https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...

int 3 of Javascript. I use it all the time because webpacked assets make it hard to find the line of code I am looking for.

[deleted]

Re: Passwordle

#134

Post by __s »

FabHK wrote: post #91
__s wrote: post #51

Earlier quoted context omitted.

You can make a rainbow table of the possible passwords & converge pretty quickly Don't hash passwords. Use pbkdf2 or some better alternative (I suggest pbkdf2 because it's widely implemented)

> You can make a rainbow table of the possible passwords Can you? Here? 14 letters from an alphabet of around 90 characters?

There's a certain network getting through quite a few SHA256s, just give it a couple decades

Re: Passwordle

#136

Post by mlyle »

residualmind wrote: post #120
mlyle wrote: post #113

Earlier quoted context omitted.

> According to the best current knowledge of humanity, it provides no information whatsoever. ??? My first guess has two green letters, or 8 bits of the hash are known. This excludes 255/256 of possible passwords-- so if there's a dictionary, it's way cut down. I also know for the other 30 digits a value that they are not -- this is about .1 bits apiece, for 3 more bits. And I get a few more bits from knowing the pop…

Are you sure thats how evenly distributed hash algorithms work? change one letter of your string, or just make it longer or shorter - none of your green fields will stay.

> Are you sure thats how evenly distributed hash algorithms work? change one letter of your string, or just make it longer or shorter - none of your green fields will stay.

True. But still, I know the vast majority of words in my dictionary don't match those two green fields after hashing, and can be eliminated from further consideration as the password.

Re: Passwordle

#138

Post by Thorentis »

dorianmariefr wrote: post #135

passWORDLE 1/1064 0 ⬜0 https://rsk0315.github.io/playground/passwordle.html on Chrome, open Dev Tools and type `res` to get the password :)

Gee, I'm so glad somebody posted this so that I can cheat on a game that is not competitive and that I'm playing voluntarily and that has no bragging rights because of how niche it is.
Post reply on HN