Conversation

Notices

1. Tinker ☀️ (tinker@infosec.exchange)'s status on Thursday, 14-Feb-2019 20:20:02 EST Tinker ☀️

   ~=8 Character Passwords Are Dead=~

   New benchmark from the Hashcat Team shows a 2080Ti GPU passing 100 Billion password guesses per second (NTLM hash).

   This means that the entire keyspace, or every possible combination of:
   - Upper
   - Lower
   - Number
   - Symbol

   ...of an 8 character password can be guessed in:

   ~2.5 hours

   (8x 2080Ti GPUs against NTLM Windows hash)

   #Hacking #Infosec

   1. drak (drak@sn.1w6.org)'s status on Saturday, 16-Feb-2019 14:16:02 EST drak

      in reply to
      That’s dead *for md4 hashing*, but not yet dead for stuff like bcrypt. For a calculation of how dead which passwords are against specific attacks, see https://www.draketo.de/english/secure-passwords