After last year's password dump and this year's Twitter hacking, many users are very concerned about their password security. The most common recommendation is to use a different, separate password for each site and service. In addition, these passwords are considered 'strong', which means they combine letters, numbers and symbols, and stay away from common words in dictionaries.
But as the old saying goes, a fence can only protect good people. If the most powerful password is targeted by a hacker with technical ability, it's no surprise to break it.
Because the password combination is a sequence of numbers, such as a phone number. Although it may take a person many years to guess a long random number, the computer built-in hash, through the calculation of these sorting, at a dizzying speed, one year's annual calculation of a person is accepted. Even modern machines can solve the problem in seconds.
There have been three 'crack experts', including security consultants, password cracking software developers, and collective members of anonymous hacking activities.
The password given 16449 hash uses MD5 to encrypt the hash function list. Websites and services, when storing passwords, run their hash functions to get plaintext passwords, such as' passwords', which look like '5f4dcc3b5aa765d61d8327deb882cf99. The 'MD5 encrypted hash has been quickly discovered by the team as its real password data.
These hackers use software that not only can use brute force attacks on passwords, but also combines random words with previously cracked similar dictionaries.
Because I can force the process faster with the violence in the software, and also speed up the attack based on thesaurus, Gosney said.
Although hackers always try to find a way to break the most secure passwords we think, there is always a very hard time. Unless they are purposefully focused on a group of passwords, it is imperative to do so, otherwise, they are also difficult to spend time to deal with these headache and complex things.