Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Passwordle

rsk0315.github.io

Post reply on HN
Print view View original

51–60 of 263 posts

Re: Passwordle

#51

Post by __s »

barbazoo wrote: post #27
teatoli wrote: post #18

What exactly is this showing ?

It's a clone of the popular wordle game where you have to guess a word, except here, you have to guess a password but instead of telling you which characters of the password are correct it tells you which characters of the corresponding SHA-256 hash are, which makes this pretty much impossible to solve as the whole point of a hash are that small changes in the input (such as a different character in the password) res…

You can make a rainbow table of the possible passwords & converge pretty quickly

Don't hash passwords. Use pbkdf2 or some better alternative (I suggest pbkdf2 because it's widely implemented)

Re: Passwordle

#52

Post by travisgriggs »

They cynical side of me notes what a great phish this could be. People are inclined to enter passwords they regularly use just to see the visualization of their favorite passwords. With a little logging -> send home, you'd be harvesting passwords left and right.

Re: Passwordle

#53

Post by peanut_worm »

travisgriggs wrote: post #52

They cynical side of me notes what a great phish this could be. People are inclined to enter passwords they regularly use just to see the visualization of their favorite passwords. With a little logging -> send home, you'd be harvesting passwords left and right.

is a password very useful without any other identifier though?

Re: Passwordle

#55

Post by yreg »

koolba wrote: post #40
boothby wrote: post #37

Got it in one "guess." Apparently どうぞ means "here you are." Makes me think the brick was deliberately left in the door for folks who look for such things.

My first guess was "friend", a la the Doors of Durin. http://tolkiengateway.net/wiki/Doors_of_Durin

It should be mellon.

Re: Passwordle

#56

Post by [deleted] »

peanut_worm wrote: post #53
travisgriggs wrote: post #52

They cynical side of me notes what a great phish this could be. People are inclined to enter passwords they regularly use just to see the visualization of their favorite passwords. With a little logging -> send home, you'd be harvesting passwords left and right.

is a password very useful without any other identifier though?

[deleted]

Re: Passwordle

#57

Post by grp000 »

travisgriggs wrote: post #52

They cynical side of me notes what a great phish this could be. People are inclined to enter passwords they regularly use just to see the visualization of their favorite passwords. With a little logging -> send home, you'd be harvesting passwords left and right.

Would the type of people amused by this have that weakness though?

Re: Passwordle

#58

Post by moltenguardian »

Someone more capable than I should make the final form of this: No green or yellow feedback is provided, but only the timing information used to calculate it. If cryptographers are serious about side-channel attacks, why not show off the danger using no-information Wordle?

(edit: Absurdle was taken)

Re: Passwordle

#59

Post by gfody »

this would be a good variant for Grant Sanderson to point his information theoretical solver at as a way to educate us on how/why sha256 leaks information that might be leveraged to crack a password, why to salt our hashes, etc.

Re: Passwordle

#60

Post by jdthedisciple »

samwillis wrote: post #39

My wife was looking at me when I opened this. “What are you grinning at?” I just locked my phone and put it face down on the table…

Why would you do that xD - I'd have explained it to her instead, doing what you did I'm not sure I'd be happy about as wifey ...
Post reply on HN