You must log in or # to comment.
MD5 hashes have been crackable on consumer hardware for like 20 years.
That’s why my bank does not hash the password. They directly send me plain text password over SMS. It is secure that way.
Key Bank?
Little known fact: it used to be called “Plaintext Private Key Bank”, but they shortened it a while ago for unspecified reasons
We ran a database of password leaks through a Caesar cypher and you’ll never guess how easy they were to break!
No one uses MD5 for password security anyway
you would be surprised how many enterprises internally use that format
I think I gather from this that predictable strings are sort of reversible to hashes.
For stuff like SQL databases, I suppose I would personally would generate completely random passwords locally on my PC.
We’ve known this for more than a decade and its only gotten faster. If people are still using MD5 for secret hashing at this point they have no idea what they are doing or horrible bosses.
A proper hashing function is the one that takes time.
