80,000 Plaintext Passwords: An Open Source Love Story in 3 Acts
summary
A white‑hat breach produces 80,000 plaintext passwords pulled in 87 seconds using tools like hashcat and common wordlists; SHA1 with a global salt proves trivial to crack while per‑user salts plus bcrypt convertability stops mass reversal and raises attacker cost from seconds to ~84,000 years for the same attack. A conversion flow runs over two and a half weeks, and a vagrant/rake‑compiler workflow plus native bcrypt gems gets built and works.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 0:51Who is TJ
- 2:33The Attack
- 6:58Rainbow Tables
- 8:48WhiteHat Attack
- 12:20Bcrypt
- 14:43Bcrypt Anatomy
- 20:01Bcrypt Ruby
- 23:42The Climax
- 24:25The Epic Thread
- 24:52The Problem
- 26:17Conclusion
related talks
25m80,000 Plaintext Passwords: An Open Source Love Story in Three Acts
31m680,000 Plaintext Passwords: An Open Source Love Story in Three Acts
34m80,00 Plaintext Passwords
40mLive autopsy of a password: lessons learnt cracking secrets
43mPlease pass the salt: Serve up passwords with a side of entropy
40mFantastic Passwords and Where to Find Them
30mhunter2: A Symphony of Password Horror
23mFantastic Passwords and Where to Find Them