Anhar_Miah
Veteran
Using brute force attack on a single pc could take a long time, however:
in reality:
(a) most attacks are combined with Dictionary attacks
(b) Distributed attacks (grid computing) etc, can drastically bring the time down.
(c) Dedicated hardware/super computers can crack most passwords in a matter of hours/days
(e) The WEAKEST CHAIN in the password link is NOT the hashing algorithm, usually the transmission.
How many sites to date still use HTTP (without HTTPS) for logging in *cough* DVXuser *cough* that transmit data in PLAIN TEXT?
any "Man In The Middle Attack" can grab these passwords without too much effect.
(f) Most users, use the same password every where.
(h) Tojans, Malware, Keyloggers, Phishing sites can all easily obtain passwords.
One of the best attack I've studied was by a Russian (I think) Group, that had an invisible I frame on a hacked webpage that executed self modifying code upon visiting it, which then added the needed payload (eg Trojan).
Sleep tight don;t let the cyber bugs bite
in reality:
(a) most attacks are combined with Dictionary attacks
(b) Distributed attacks (grid computing) etc, can drastically bring the time down.
(c) Dedicated hardware/super computers can crack most passwords in a matter of hours/days
(e) The WEAKEST CHAIN in the password link is NOT the hashing algorithm, usually the transmission.
How many sites to date still use HTTP (without HTTPS) for logging in *cough* DVXuser *cough* that transmit data in PLAIN TEXT?
any "Man In The Middle Attack" can grab these passwords without too much effect.
(f) Most users, use the same password every where.
(h) Tojans, Malware, Keyloggers, Phishing sites can all easily obtain passwords.
One of the best attack I've studied was by a Russian (I think) Group, that had an invisible I frame on a hacked webpage that executed self modifying code upon visiting it, which then added the needed payload (eg Trojan).
Sleep tight don;t let the cyber bugs bite
