New answers tagged passwords
Real crackers will try the more commonly used passwords first. They will first use names, dictionary words, lists of known used passwords, and variations on all of these. Here is a description of one such effort on a list of hashes that was published: http://www.thetechherald.com/articles/Report-Analysis-of-the-Stratfor-Password-List
The threat model of password storage is that of server compromision, where the attacker gain access to the database and server code. The attacker can then run the code to test password candidates, possibly making modifications, porting to faster platform, etc. The attacker will not bother computing the fake hash and fake salt. So this scheme is twice as ...
Top 50 recent answers are included