siga
Security and privacy
password cracking
SHOW HN2016
149points
58comments
#223of 2,264 in 2016
Top 10%of 2016 by points
How HN took it
LovedMost comments that take a side are positive
4 positive, 16 neutral or asking, 2 mixed, 0 critical, out of 22 comments about the project. Thread score +0.13.
Idea: 4 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Novel FIFO queue approach to genetic algorithms
From 2 comments
I loved this, since it's a different approach to genetic programming (with the FIFO list) that could work in different kinds of problems. Also the way it is applied to password…
antirez on HNIt uses a stack [1]. Therefore, I like it <3 [1] The stack is used in place of an explicit fitness function. I have nothing against fitness functions. But the bit about using a…
YeGoblynQueenne on HN
Interesting use of password non-randomness
From 2 comments
I loved this, since it's a different approach to genetic programming (with the FIFO list) that could work in different kinds of problems. Also the way it is applied to password…
antirez on HNInteresting approach. Especially if you were to feed the training set with most-used password lists from leaked databases or similar. Do you have any performance metrics against…
saganus on HN
Objections
Unclear what the algorithm does and how it works
From 3 comments
I don't understand, what is the input and output of this at a conceptual level? One of the examples apparently takes a list of leaked passwords from MySpace - and so what does it…
sundarurfriend on HNWould you care to explain like I am 5? Layman's terms... What are you doing and how are you doing it?
chirau on HNIt's not clear to me what this does, or if it's useful. You have a fixed-length vector of strings and you make cross-overs between elements in the vector based on non-uniform…
chm on HN
Ethical concerns about password cracking tools
From 1 comment
This is really cool. I'm surprised just finding common substrings through evolution works so well. Wouldn't just using the existing substrings in a dictionary work better than…
Houshalter on HN
Speed compared to hashcat and brute force is unclear
From 1 comment
How fast can it go? And alternatively, how fast can it go with hashcat? This looks awesome, but without the GPU speed advantage I'm not sure how well it'll fare against the…
ryanlol on HN
Requests
Performance comparison with brute force and hashcat
From 2 comments
Interesting approach. Especially if you were to feed the training set with most-used password lists from leaked databases or similar. Do you have any performance metrics against…
saganus on HNHow fast can it go? And alternatively, how fast can it go with hashcat? This looks awesome, but without the GPU speed advantage I'm not sure how well it'll fare against the…
ryanlol on HN
Plain-language explanation
From 1 comment
Would you care to explain like I am 5? Layman's terms... What are you doing and how are you doing it?
chirau on HN
Questions
Is there a fitness function?
From 2 comments
It's not accurate to say there's no fitness function. There is a fitness function, but it is not a continuous function. (There's no way to have a GA without some notion of…
lvs on HNIt's not clear to me what this does, or if it's useful. You have a fixed-length vector of strings and you make cross-overs between elements in the vector based on non-uniform…
chm on HN
Does it crack XKCD-style passphrases?
From 2 comments
So XKCD style correcthorsebatterystaple-esque passwords would fall in no time?
Phemist on HNCool system. For clarity though, those aren't xkcd style passwords. They're words that form a normal pattern. Xkcd requires that the words are randomly generated.
aidos on HN
Alternatives named
hashcat
From 1 comment
How fast can it go? And alternatively, how fast can it go with hashcat? This looks awesome, but without the GPU speed advantage I'm not sure how well it'll fare against the…
ryanlol on HN
Brute force attacks
From 1 comment
Interesting approach. Especially if you were to feed the training set with most-used password lists from leaked databases or similar. Do you have any performance metrics against…
saganus on HN
Diceware passphrases
From 1 comment
Sorry for going slightly OT but I think more people should know this: xkcd style passwords are actually called diceware passwords [1], the wikipedia article [2] links to…
cheshire_cat on HN