Groups | Search | Server Info | Login | Register


Groups > comp.os.linux.security > #767

Re: Adding Secure Passwords to Linux

Path csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From Allodoxaphobia <trepidation@example.net>
Newsgroups comp.os.linux.security
Subject Re: Adding Secure Passwords to Linux
Date 12 Jun 2023 12:35:50 GMT
Lines 22
Message-ID <slrnu8e496.28ha.trepidation@vps.jonz.net> (permalink)
References <b5a2266d-b904-4175-bbaf-a4e5139754bbn@googlegroups.com> <20220729083657.53e8c00e@8200cmt> <A3fdFLvyyyKnZ8KuK@bongo-ra.co>
Reply-To If_you_must-Reply_to@my.sig.adr
X-Trace individual.net 6cElpukGx03iHZxfM2BFPA2MlEMLgouEt0Z6DGGp9CYESJ67iX
Cancel-Lock sha1:1L5FtHpi4tm0kWCT4Zsb+ww3EhY=
User-Agent slrn/1.0.3 (FreeBSD)
Xref csiph.com comp.os.linux.security:767

Show key headers only | View raw


On Sun, 11 Jun 2023 10:30:40 -0000 (UTC), Spiros Bousbouras wrote:
> On Fri, 29 Jul 2022 08:36:57 +0200
> Marco Moock <mo01@posteo.de> wrote:
>> On Thu, 28 Jul 2022 11:25:49 -0700 (PDT)
>> John Savard <quadibloc@gmail.com> wrote:
>> 
>> > I just encountered an article saying that, since today's GPUs are so
>> > powerful, there's no such thing as a secure password any more.
>> 
>> I depends on the length. Longer passwords are better. The process of
>> cracking passwords when a hash table is available, even if salted, is
>> decreasing because GPUs become faster and this process can easily be
>> split on many machines.
>> There are some steps that can increase the time:
>> 
>> Longer passwords (The amount of time needed increases exponential with
>> the length of the pw)
>
> Assume that an attacker can test 10**12 passwords per second. 

What internet-facing firewall would entertain 10**12 password attemps
per second?!?!

Back to comp.os.linux.security | Previous | NextPrevious in thread | Next in thread | Find similar


Thread

Adding Secure Passwords to Linux John Savard <quadibloc@gmail.com> - 2022-07-28 11:25 -0700
  Re: Adding Secure Passwords to Linux Richard Kettlewell <invalid@invalid.invalid> - 2022-07-28 21:16 +0100
  Re: Adding Secure Passwords to Linux Marco Moock <mo01@posteo.de> - 2022-07-29 08:36 +0200
    Re: Adding Secure Passwords to Linux Spiros Bousbouras <spibou@gmail.com> - 2023-06-11 10:30 +0000
      Re: Adding Secure Passwords to Linux Allodoxaphobia <trepidation@example.net> - 2023-06-12 12:35 +0000
        Re: Adding Secure Passwords to Linux Spiros Bousbouras <spibou@gmail.com> - 2023-06-12 13:33 +0000
        Re: Adding Secure Passwords to Linux Richard Kettlewell <invalid@invalid.invalid> - 2023-06-12 16:46 +0100
          Re: Adding Secure Passwords to Linux Bit Twister <BitTwister@mouse-potato.com> - 2023-06-13 08:10 -0500
            Re: Adding Secure Passwords to Linux "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2023-06-13 15:12 -0400
          Re: Adding Secure Passwords to Linux Spiros Bousbouras <spibou@gmail.com> - 2023-06-15 20:30 +0000
            Re: Adding Secure Passwords to Linux Richard Kettlewell <invalid@invalid.invalid> - 2023-06-16 08:29 +0100
              Re: Adding Secure Passwords to Linux Spiros Bousbouras <spibou@gmail.com> - 2023-06-16 11:18 +0000
  Re: Adding Secure Passwords to Linux John McCue <jmccue@magnetar.jmcunx.com> - 2023-06-11 14:28 +0000

csiph-web