Hacker News Reader

Agreed, it was a bit disappointing to get to the part where the password was added to the word list.

The author does point out that a 2,000,000+ hashes per second could be achieved so it might give insight into how quickly all accounts will be checked against popular word lists. If I was a last pass customer I would be thinking about changing passwords on all accounts.

View on HN

> Agreed, it was a bit disappointing to get to the part where the password was added to the word list.

Why is that disappointing? It is a proof of concept, rather than evidence that it has already been done. Sure, it is not novel and perhaps it is overstated, but it does point out that attacks are already possible. It would also be interesting to see the results of a dictionary attack to see if the behaviour of people who use password managers is any better than the population as a whole.

2,000,000+ H/s on macbook. I heard GPU clusters built purposely for quick hashing got cheaper recently.

2,000,000 on a multi GPU setup not a MacBook

He didn’t achieve 2MH/s on his MacBook. That was the authors estimate of what you could achieve on a multi-GPU setup, it was only around ~1KH/s on the MacBook.

Reply on news.ycombinator.com