Monday, November 26, 2007

Lost Your Password? Google Can Find It

Forgotten your password? Google can find it for you. Unfortunately

When a Cambridge University team wanted to break a hacker's password, they turned to Google - with startling results. But there's a lesson for you too.
a hacker, apparently Russian, broke into the blog of the Cambridge University security team
the interesting part came later, when the team was clearing up. They could see the user, but what password had he used? All they had was the entry in the MySQL database for the password
He took the hash - 20f1aeb7819d7858684c898d1e98c1bb - from the database and stuck it into Google. Lo and behold, it turned out to be "Anthony".
So: want to check the security of your favourite password(s)? First, use the MD5 hashing page here
if you want to feel safe and have OSX, go to the terminal and type md5 -s mypassword - though use your password, not mypassword.
Second, paste that code into your favourite search engine.
If it returns no results - well done!
for now.
 blog it

No comments: