AI cracks 51% of passwords in 1min

https://www.homesecurityheroes.com/ai-password-cracking/?password=MarL30n%40rdA

by lambersley • 3 years ago

10 7 3 years ago

homesecurityheroes.com

baldr333• 3 years ago

A AI password cracker ? How is this different then a brute force attack ?

version_five• 3 years ago

It's marketing BS (edit, that may be too harsh)

They do reference "passGan" which I assume is this, from 2017: https://github.com/brannondorsey/PassGAN

Paper is here https://arxiv.org/abs/1709.00440

They use "AI" to generate passwords that are more likely based on actual choices, like P@s5w0rd kind of stuff. The paper that is, I have no idea about the company.

Turskarama• 3 years ago

It isn't. You could perhaps make an argument that it's more likely to try "likely" passwords first, which means it will find theoretically strong but predictable passwords faster but should actually take longer to crack unpredictable passwords.

And of course it's trained on password leaks... but so are the people who write password cracking algorithms.

fallingfrog• 3 years ago

I definitely get the sense it’s not running its actual AI against what you type, but rather just counting the number of characters and comparing it to the chart below, which is of debatable accuracy.

m-p-3• 3 years ago

All good, a derivative of my master password for my Bitwarden vault doesn't even completely fit in there and gives 7.23B years.

abrookewood• 3 years ago

Hmmm ... surely this is just statistical analysis sprinkled with magical marketing fairy dust: "[this] uses Generative Adversarial Network (GAN) to autonomously learn the distribution of real passwords from actual password leaks ... After training, GAN was able to leverage the acquired knowledge to create new sample passwords that follow the neural network distribution"

uglycoyote• 3 years ago

hmmm.. they don't seem to really explain the rules of the game here. Doesn't the length of time it takes to crack a password depend on the rate at which you are allowed to try different guesses at the password prompt, and whether or not you get locked out or penalized with delays after a certain number of wrong guesses?

When they say it takes 48 minutes to "crack" my password are they assuming some specific rate at whichever the system they are trying to log in to responds to failed login attempts?

AI cracks 51% of passwords in 1min

Related Stories