[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 8 Oct 2013 16:52:36 -0600
From: Kevin Young <kevin.p.young@...il.com>
To: "john-users@...ts.openwall.com" <john-users@...ts.openwall.com>
Cc: john-users <john-users@...ts.openwall.com>
Subject: Re: How best to compute this via john
Hey Stephen,
Thanks for your thoughts and comments.
Sentence as it is
Sentence lowercased
Sentence no punctuation/lowercased
First 2 words of sentence
First 3 words of sentence
....
When we pull them the first thing we do is strip out all punctuation. It's faster and easier to add the variations later.
Same goes for case. Easier to ucase later. And, statistically, we found that very few people use proper case. Again, based on stats, people seldom use the space char.
We also parse on 2, 3, 4, etc. and sort it by character count. 8 char phrases, 9 char, etc, all the way up to 30 char. The success rate rolls off steeply beyond phrases 15 chars in length.
We haven't done much with most probable as the results are still so widely distributed. We don't see anything like admin, password1, guest, letmein, changeme, etc.
Thoughts?
-kevin-
Sent from my iPhone
On Oct 8, 2013, at 10:11 AM, Stephen John Smoogen <smooge@...il.com> wrote:
> http://arstechnica.com/security/2013/10/how-the-bible-and-youtube-are-fueling-the-next-frontier-of-password-cracking/2/
>
> I am guessing that some scripts would be needed to parse through a large
> library of project Gutenberg and Wikipedia articles and then output
> something like:
>
> Sentence as it is
> Sentence lowercased
> Sentence no punctuation/lowercased
> First 2 words of sentence
> First 3 words of sentence
> ....
>
> I am guessing we are running out of time in the universe at this point. I
> would try to speed it up by taking all the sentences (break up anything in
> quotes as a separate sentence.) and then sort them by order of frequency.
> That way "To be or not to be" would be higher than "The genus spectrum of
> the common toad spans a far distance."
>
> Lord this is going to be a load of work :).
>
> --
> Stephen J Smoogen.
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
