Google

Blog Archive

Recent Comments

11/23/07

Google easily cracks MD5 passwords

The author of "Google can crack passwords" warned: Don't post this online!

Passwords using MD5 hash (see Wikipedia article on MD5) can be broken using the Google search engine. Wordpress for example uses MD5.

The article said: "A CLEVER bloke into security research at the University of Cambridge computer lab wrote in his blog last Friday that he's discovered Google works as a password MD5 hash cracker."

To try it, go to Miraclesalad, input "The quick brown fox jumps over the lazy dog" to get a MD5 hash, which is 9e107d9d372bb6826bd81d3542a419d6.

Now go to Google and enter 9e107d9d372bb6826bd81d3542a419d6, and you retrieve the original phrase back.

Actually, MD5 hash reversal programs, also called hash cracker, have been in existence for a long time. Still the use of Google is very convenient.

Now the security people should move quickly to prevent harm from the discovery.
It cannot prevented just by not publishing the method. Once it is online, it will spread.

1 komentar:

websecure said...

just use plain-text.info for md5 cracking