Thursday, December 6, 2012

Password Security


New Password Hacking Technology

     As means of making the internet and computers in general more secure, technology to break this security develops just as fast if not faster. It is somewhat of a vicious cycle. New security methods develop then computer experts that specialize in exposing security holes, called “pentesters” (penetration tester), find ways to break the security thus exposing ways for security to improve. A recent breakthrough in password cracking technology was recently developed by Jeremi Gosney (a.k.a epixoip). Jeremi developed a proprietary password cracking rig running the password cracking program Hashcat running on Open Computer Language (OpenCL) framework. The rig uses 25 AMD GPUs running in tandem to brute force password hashtags. The system can generate millions of attempts in a very small amount of time.
            I think technology like this is a double-edged sword. Used correctly it can be a great tool for exposing security holes in password technology. At the same time, however, used maliciously it can post a serious threat to personal security. In the wrong hands it can have potentially devastating consequences. In situations like the recent major PSN hack technology like this can be used to obtain personal information like credit card numbers, phone numbers and a home address.
            Password cracking utilities and security will continue to wage war on each other for the foreseeable future. No security system is 100% fool proof and it will be interesting to watch what crazy methods people invent to break them.
            

No comments:

Post a Comment