Security Ledger reports on a breakthrough in password-cracking, using 25 graphics cards in parallel to churn through astounding quantities of password possibilities in unheard-of timescales. It's the truly the end of the line for passwords protected by older hashing algorithms and illustrates neatly how yesterday's "password that would take millions of years to break" is this year's "password broken in an afternoon," and has profound implications for the sort of password hash-dumps we've seen in the past two years.
A presentation at the Passwords^12 Conference in Oslo, Norway (slides available here), has moved the goalposts, again. Speaking on Monday, researcher Jeremi Gosney (a.k.a epixoip) demonstrated a rig that leveraged the Open Computing Language (OpenCL) framework and a technology known as Virtual Open Cluster (VCL) to run the HashCat password cracking program across a cluster of five, 4U servers equipped with 25 AMD Radeon GPUs and communicating at 10 Gbps and 20 Gbps over Infiniband switched fabric.
Gosney’s system elevates password cracking to the next level, and effectively renders even the strongest passwords protected with weaker encryption algorithms, like Microsoft’s LM and NTLM, obsolete.
In a test, the researcher’s system was able to churn through 348 billion NTLM password hashes per second. That renders even the most secure password vulnerable to compute-intensive brute force and wordlist (or dictionary) attacks. A 14 character Windows XP password hashed using NTLM (NT Lan Manager), for example, would fall in just six minutes, said Per Thorsheim, organizer of the Passwords^12 Conference.
New 25 GPU Monster Devours Passwords In Seconds [Security Ledger]
A good way to understand how something works is to watch how it fails. Forgotten Weapons: Over many years of filming with my high speed camera, I have a decent little library of malfunctions in a wide variety of guns. These don’t normally make it into videos, and I figured it would be neat to […]
Eccentric eyewear maker Scott Urban first kickstarted his "Reflectacles" frames in 2016; the frames used emedded retroreflectors to make them throw back tons of light, making them highly visible (and great for things like night cycling); subsequent iterations beefed up the IR reflectivity, which blinded many CCTV surveillance cameras (they use IR to paint low-light […]
The fourth incarnation of the wonderful Raspberry Pi is upon us. A faster quard-core CPU, up to 4GB of RAM, gigabit ethernet and dual HDMI outputs are the upgrades; there’s USB-C too, but just for power. The CPU boost is a big deal, say early users, but dual-4k displays and 4x the RAM bring it […]
When it comes to large computer systems, not one of them is fully secure. Even with constant updates to the platforms that keep vital networks humming, there’s always a back door. And companies are willing to pay handsomely to effective bouncers that can keep an eye on them. Call them ethical hackers or white hat […]
So you’ve visited the Kennedy Space Center every year. You’ve watched “The Right Stuff” for the 95th time. There must be something to do while you’re waiting to join Space Force for the next manned mission to Mars or the moon. Here’s a combo that should raise a salute from any fan of space or […]
Looking for a new tablet? If you haven’t upgraded in a while, it might be time to check out the latest iPad Pro for two very good reasons. First, the 2018 model is a real workhorse. The 12X Bionic chip processor means it can handle any task you set out for it, and still have […]