Password recovery speeds...

[Ste]

https://www.lockdown.co.uk/?pg=combi&s=articles

Demonstrates the time required to figure out passwords based on the types and number of characters used.

I'm off to change my passwords after reading that.

[fuzz]

Fook me, 76 billion passwords per second

Only a 10 character password that include upper and lowercase, numbers and special characters could possibly defeat it.

Must remember that then - all passwords must be changed!

Thing is though, if you were to run the cracker on one system say, class D, wouldn't you need to know the character set the password system used? A bruteforce cracker needs to know the character set to try each one in sequence, so the number of combinations is fixed. So the example of darren has not 308.9 million combinations if the character set has 62 characters. It would have 57 billion combinations. Unless you knew that the password or allowed characters had x possible characters, you would have to include all possible characters, or the cracker could run infinitely.

I know that a recent MD5 bruteforce cracker I used had a character set of 62 (letters and numbers) and took 40 minutes to complete 5 characters. So six characters would take 42 hours. (40x63) That was on a P4 2GHz system.
____________________
https://www.bikepics.com/members/fuzzbcf/
Bikes: '99 NSR125R, '00 SV650S, K1 GSX-R600, '97 CB500, K3 SV1000S, '16 VFR800

[Suzuki]

Of course, you can only crack a password in that manner if you have direct access to the encrypted password.

For example, if you're trying to crack a Hotmail password, the only way you can test a possible password is to attempt to log in to Hotmail. You never have real access to the stored encrypted password.
So... your hacking time is massively increased, as you have to wait for the cycle time of the system you're logging into. Also, you're likely to be stopped long before you get to even the 1000th attempt, let alone millions or billions of attempts.

All depends on the system.
____________________
<Simple> no I'm shaven Jon
<Simple> it is a big enough hole.. I'll leave it now
Ride: 1999 Suzuki GSXR600 (yellow/black) IRC: Stats - Relationship Map