6 ms·

What's the significance of this? Upon cursory glance it seems like a community site for android developers. Am I missing something?

by cluda01 14y ago

ajross 14y ago
It's a big site with, no doubt, a gold mine of email/password combinations to try vs. other services. Maybe the password storage was secure, but probably not. Maybe a few of those users were using secure one-off passwords, but realistically most weren't.
- arn 14y ago
  it's a vbulletin site, so their standard hashing (http://www.vbulletin.org/forum/showthread.php?t=178091 http://www.vbulletin.org/forum/showthread.php?t=178091) which looks to be md5 (md5 (pass) + salt).
  - ajross 14y ago
    Two iterations of the hash isn't what you'd call "secure". But at least it's salted.
    - akaBruce 14y ago
      The hash iterations are due to vBulletin's life span and being a product. They had md5 hashed passwords. Then they realized they have to salt them. So instead of adding the the salt to the password then hashing it, they decided to add the salt to the hash so they could salt every password without having to wait to get the original password.
      - ajross 14y ago
        The point was more that two iterations of MD5 isn't nearly slow enough. This site claims 5.6G/s on an ATI 5970 (~$400US) card: http://www.golubev.com/hashgpu.htm http://www.golubev.com/hashgpu.htm So for a 2-iteration password cracker, that's enough to search almost a 48 bit space of passwords in a day. That's enough to check every possible ASCII password of 7 characters or less, and a good heuristic search will probably get you much more than that.
    - shabble 14y ago
      From the link: > If you still want to do it by steam, for a new user you just need to generate a 3 character salt randomly ... I can't see the code example, but assuming char is 8 bits (which isn't unreasonable for ascii), that's at best, 16M unique salts.
  - shabble 14y ago
    Does the repeated MD5 protect it from the common MD5 attacks? (I recall there being something especially dangerous about just md5($salt . $pass), but I forget the details - Length Extension attack maybe?)

What's the significance of this? Upon cursory glance it seems like a community site for android developers. Am I missing something?

by cluda01 14y ago

What's the significance of this? Upon cursory glance it seems like a community site for android developers. Am I missing something?

ajross 14y ago

It's a big site with, no doubt, a gold mine of email/password combinations to try vs. other services. Maybe the password storage was secure, but probably not. Maybe a few of those users were using secure one-off passwords, but realistically most weren't.

arn 14y ago
it's a vbulletin site, so their standard hashing (http://www.vbulletin.org/forum/showthread.php?t=178091 http://www.vbulletin.org/forum/showthread.php?t=178091) which looks to be md5 (md5 (pass) + salt).
- ajross 14y ago
  Two iterations of the hash isn't what you'd call "secure". But at least it's salted.
  - akaBruce 14y ago
    The hash iterations are due to vBulletin's life span and being a product. They had md5 hashed passwords. Then they realized they have to salt them. So instead of adding the the salt to the password then hashing it, they decided to add the salt to the hash so they could salt every password without having to wait to get the original password.
    - ajross 14y ago
      The point was more that two iterations of MD5 isn't nearly slow enough. This site claims 5.6G/s on an ATI 5970 (~$400US) card: http://www.golubev.com/hashgpu.htm http://www.golubev.com/hashgpu.htm So for a 2-iteration password cracker, that's enough to search almost a 48 bit space of passwords in a day. That's enough to check every possible ASCII password of 7 characters or less, and a good heuristic search will probably get you much more than that.
  - shabble 14y ago
    From the link: > If you still want to do it by steam, for a new user you just need to generate a 3 character salt randomly ... I can't see the code example, but assuming char is 8 bits (which isn't unreasonable for ascii), that's at best, 16M unique salts.
- shabble 14y ago
  Does the repeated MD5 protect it from the common MD5 attacks? (I recall there being something especially dangerous about just md5($salt . $pass), but I forget the details - Length Extension attack maybe?)